Brookhaven ENT Allergy and Facial Surgery disclosed a data breach to the U.S. Department of Health and Human Services on July 24, 2026. The incident affected 30,403 individuals in the United States.
The breach involved protected health information (PHI), which may include medical records, health insurance information, diagnoses, and prescription information. The specific categories of exposed data have not been fully disclosed at this time. The company is a medical practice located in Brookhaven, Mississippi.
A law firm is investigating the incident. The timeline of events leading up to the disclosure, including when the practice first became aware of the compromise, remains unknown. Details regarding the exact data fields exposed and state-by-state impact are not yet public.