Blue Fish Pediatrics disclosed a data security incident and began notifying affected individuals on June 17, 2026. The company completed its review on May 4, 2026, and the incident involved files potentially accessed between July 11 and July 17, 2025. This breach may have exposed personal and medical information.
The confirmed data types exposed include names, dates of birth, addresses, driver’s license/state ID numbers, medical record numbers, diagnoses/conditions, lab results, medication information, healthcare claims, clinical/treatment information, and for a limited number of people, Social Security numbers. Approximately 41,485 Texas residents were affected. It remains unclear if a state Attorney General filing has occurred or if any class action lawsuits have been filed.
Details about data breaches can emerge over time, and notification processes may be delayed.