On January 30, 2026, the LYNX hacking group claimed responsibility for a ransomware attack against Rosch Visionary Systems, a small information technology and services company based in Altoona, Pennsylvania. Rosch Visionary Systems, which specializes in allergy and immunotherapy management software, detected a compromise to a portion of its network. The company notified impacted individuals by mail, and the incident was reported to the U.S. Department of Health and Human Services on March 23, 2026.
The breach may have exposed personal and health information, including names, dates of birth, health information, Social Security numbers, addresses, government IDs, and financial information. Rosch Visionary Systems is identified as a third-party software vendor, meaning this was a vendor breach affecting downstream healthcare clients. This incident has led to a lawsuit investigation by Shamis & Gentile P.A.
The exact total number of affected individuals and any specific class action complaint or MDL status are not fully established in the currently available sources. Further details may emerge as investigations continue and official notifications become more widespread.