General Physician Data Breach Lawsuit Investigation
Patients recently notified by General Physician, P.C. (General Physician) may qualify to pursue compensation and free identity-protection services after a cyber-incident exposed personal data. Review the facts below and take action to safeguard your information or join potential legal claims.
Key Takeaways
- Breach window: April 6 – June 12, 2024 (unauthorized access to company email accounts).
- Discovery date: June 12, 2024; consumer letters mailed September 26, 2025.
- Individuals affected: 3 (reported to Montana Attorney General).
- Data exposed: patient names.
- Free services: complimentary credit-monitoring & identity-restoration through IDX.
Timeline of the General Physician Data Breach
April 6, 2024 – June 12, 2024: Threat actors gained unauthorized access to certain General Physician email accounts.
June 12, 2024: Suspicious activity detected; the company immediately launched an investigation with third-party cybersecurity experts.
August 6, 2024: Investigation confirmed unauthorized access.
January 21, 2025: File review to determine affected data concluded.
September 26, 2025: Formal consumer notifications mailed and filed with the Montana Attorney General.
What Information Was Involved?
The impacted email accounts contained patient names. The notice did not specify any additional personal data elements.
Company Response
General Physician states it has:
- Engaged external cybersecurity specialists to investigate and contain the incident.
- Enhanced administrative and technical security controls.
- Provided additional employee security-awareness training.
- Offered complimentary credit-monitoring and identity-restoration services through IDX.
Your Next Steps
- Enroll in the free IDX services. Follow the instructions in your letter to activate monitoring and identity-restoration support.
- Monitor financial and medical statements. Promptly report unfamiliar activity to your provider or bank.
- Preserve documents. Keep the breach letter and any records of suspicious charges—they may be required for future claims.
- Explore legal options. With only three Montana residents affected, individual claims may still be viable. Consult data-breach counsel about potential compensation.
Company Overview
General Physician operates a multi-specialty medical practice serving patients primarily in Western New York.
- Website: gppconline.com
- Headquarters: 726 Exchange Street Suite 710, Buffalo, NY, United States
- Industry: Hospital & Health Care
- Year founded: 2010
- Employees: 500 – 1,000
Frequently Asked Questions
I received a data breach letter from General Physician — what should I do?
Activate the complimentary IDX credit-monitoring service, review your financial and medical statements for unusual activity, and keep all correspondence regarding the breach.
How many people were affected by the General Physician data breach?
The company’s filing with the Montana Attorney General lists 3 impacted individuals.
What information did the General Physician breach expose?
The notice confirms exposure of patient names. No other specific data points were identified.
Did General Physician offer credit monitoring, and for how long?
Yes. General Physician is providing complimentary credit-monitoring and identity-restoration services through IDX. The company did not disclose the exact duration.
How can I get the official breach notice (PDF) for General Physician?
You can access and download the original notice directly from the Montana Attorney General’s website using the link provided above.
Last updated October 1, 2025.
Attorney Advertising. Prior results do not guarantee a similar outcome.