By HFT Staff

On May 7, 2026, Family Medical Associates of Raleigh, PA (FMAR) became aware of a potential cybersecurity event within its systems (the Incident). As soon as FMAR discovered this, it immediately began an investigation and took steps to contain and remediate the situation, including resetting credentials, isolating affected systems, communicating with law enforcement and engaging data security and privacy professionals to assist with its response.  

Due to the nature of the Incident, the investigation is still ongoing into what data pertaining to individuals was affected. Currently, the investigation has found evidence that between April 18, 2026, and April 20, 2026, an unauthorized actor intermittently accessed some FMAR systems. Evidence further indicates that the unauthorized actor may have downloaded internal data, which could include individuals’ personal information, including Protected Health Information. There is currently no evidence that any information has been misused for identity theft or fraud in connection with this Incident.  

The investigation remains ongoing, but based on the information currently available, the affected systems may have contained: demographic information, contact information, medical and treatment information, health insurance information, financial or payment-related information, government-issued identification numbers and other information maintained by FMAR in connection with providing services.  

These are general categories of information that FMAR believes may be present within the affected systems and may have been downloaded by an unauthorized actor during the Incident. However, the investigation is ongoing to identify specific individuals and the extent of the information involved.  

In addition to the actions described above, FMAR has been working to continue its investigation and adopt additional safeguards on top of its existing protections. FMAR continues to work with data security and privacy firms to aid in its investigation and response, and it is reporting this Incident to relevant government agencies.