ID Care, the largest private infectious disease practice in New Jersey, announced a data breach that potentially exposed the information of current and former patients. The company detected suspicious activity on November 5, 2025, which led to the confirmation of unauthorized access and potential file download by an unauthorized actor. The company posted a notice on its website (idcare.com) and is conducting an ongoing review to determine the full impact.
The breach may have involved sensitive patient data, including names, addresses, Social Security numbers, dates of birth, health insurance details, and medical information such as diagnoses, treatments, and prescriptions. The exact number of affected individuals remains undetermined as the investigation is ongoing to identify specific individuals. Notifications to affected individuals are planned by mail once the investigation is complete, and ID Care is offering complimentary credit monitoring.
Details can emerge later as the investigation progresses, and notices may be delayed.