On or about May 22, 2025, Academic Urology & Urogynecology of Arizona, a division of Palo Verde Hematology and Oncology (“Academic Urology”), detected unauthorized access to portions of its network. Upon discovering the incident, Academic Urology immediately secured its systems and launched an internal investigation with assistance from outside cybersecurity professionals experienced in data‑security events.
Following an extensive forensic investigation and manual document review, Academic Urology determined on January 30, 2026, that an unauthorized party may have accessed or acquired certain files containing personal and/or protected health information (PHI) during the period of May 18–22, 2025.
On February 12, 2026, Academic Urology began mailing formal notification letters to affected individuals and started offering complimentary credit monitoring and identity theft protection services for 12 or 24 months through IDX, with an enrollment deadline of May 12, 2026.
Academic Urology is a specialized practice providing comprehensive, state-of-the-art care for urologic and urogynecological conditions across the West Valley, including Phoenix, Sun City, and Wickenburg.
The impacted data may relate to individuals whose personal and/or medical information was contained within the files stored on Academic Urology’s network systems.
Following the breach, Academic Urology stated that it implemented additional safeguards and continues to evaluate its internal data‑security measures to reduce the risk of future unauthorized access.
If you received a Data Breach notification letter from Academic Urology, it confirms that your personal information may have been accessed and/or acquired by an unauthorized actor during this incident.
What information is involved in the Academic Urology & Urogynecology of Arizona Data Breach?
Compromised information may include:
First Name
Last Name
Other Protected Health Information
Your Personally Identifiable Information (PII) includes details that can be used to identify you. Organizations that collect and store PII and PHI are legally obligated to safeguard this information. When companies fail to adequately protect sensitive data, they may face legal liability and financial penalties.
If Protected Health Information (PHI) was involved, the exposed data may include medical information protected under HIPAA and state privacy laws. PHI exposure increases the risk of medical fraud, insurance fraud, and unauthorized use of confidential health data.
When personal information is exposed in a data breach, it can be used to commit identity theft, financial fraud, medical identity theft, and other forms of misuse — sometimes months or years after the breach.
If your data has been exposed, one of the most effective steps you can take is to promptly enroll in the complimentary credit and identity monitoring services offered by Academic Urology and continue monitoring your financial accounts and credit reports for suspicious activity.
Residents of certain states, including California, may have additional privacy protections and legal remedies under consumer‑protection and medical‑privacy laws.
Residents of California benefit from enhanced privacy protections under the California Consumer Privacy Act (CCPA), which provides additional rights regarding the collection, storage, and protection of personal information. California residents may also have additional legal remedies when personal data is compromised in a breach.
If you received a NOTICE OF DATA BREACH letter from Academic Urology & Urogynecology of Arizona, your personal and medical information may be at risk. Sensitive data compromised in a breach may be exploited by cybercriminals to commit fraud and identity theft.
Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.