Academic Urology & Urogynecology of Arizona over the weekend confirmed it notified 73,281 people about a May 2025 data breach that compromised the following personal info:
- Names
- Social Security numbers
- Credit card info
- Taxpayer ID numbers
- Addresses
- Dates of birth
- Tribal identification
- Government-issued ID number (e.g. driver’s license)
- Digital signatures
- Passport numbers
- Health insurance info including:
- Policy numbers
- Subscriber ID numbers
- Other unique identifiers
- Application and claim history
- Medical info including:
- Diagnoses
- Conditions
- Lab results
- Medications
A ransomware group called Inc took credit for the breach on its data leak website in June 2025. Academic Urology first disclosed the breach on its website in August 2025.
Academic Urology has not acknowledged Inc’s claim, and Comparitech cannot independently verify it. We do not know if Academic Urology paid a ransom, how much Inc demanded, or how attackers breached Academic Urology’s network. Comparitech contacted Academic Urology for comment and will update this article if it replies.
“On or about May 22, 2025, Academic Urology detected unauthorized access to our network,” says Academic Urology’s notice to breach victims.
“After an extensive forensic investigation and manual document review, we determined on January 30, 2026, that between May 18, 2025 and May 22, 2025, certain files containing personal and or protected health information may have been subject to unauthorized access or acquisition.”
Academic Urology is offering eligible victims free credit monitoring and identity theft protection through IDX. The deadline to enroll is May 12, 2026.
Who is Inc?
Inc is a ransomware group that first surfaced in July 2023 and targets a wide range of victims in healthcare, education, and government. Its methods involve spear phishing and exploiting known vulnerabilities in software. Once infected, Inc’s malware both steals data and locks down computer systems until a ransom is paid to unlock them.
Inc has claimed responsibility for 157 confirmed ransomware attacks since it started, plus 485 unconfirmed attack claims that haven’t been acknowledged by the targeted organizations.
54 of Inc’s confirmed attacks hit healthcare organizations. The resulting breaches compromised the personal records of more than 4.8 million people.
Inc recently took credit for the following data breaches:
- TriCity Family Services (IL) notified 2,511 people of a November 2024 data breach
- Quadrangle Imaging Center (Puerto Rico) notified at least 500 people of an August 2025 data breach
- Persante Health Care (NJ) notified 111,815 people of a January 2025 data breach
In 2026 to date, three of Inc’s 64 attack claims have been confirmed by the targeted organizations.
Ransomware attacks on US healthcare
Comparitech researchers logged 117 confirmed ransomware attacks on US hospitals, clinics, and other healthcare providers in 2025, which subsequently notified 9.7 million data breach victims.
Other such recently-confirmed ransomware attack claims include:
- Issaqueena Pediatric Dentistry (SC) reported a November 2025 data breach claimed by Interlock
- ApolloMD Business Services (GA) notified 626,540 people of a May 2025 data breach claimed by Qilin
- Alpine Ear, Nose & Throat (CO) notified 65,648 people of a November 2024 data breach claimed by BianLian
Ransomware attacks on US hospitals, clinics, and other care providers can steal data and lock down infected computer systems. They can cripple critical systems and endanger the health, privacy, and security of patients. Infected hospitals and clinics must pay a ransom or face extended downtime, data loss, and putting patients and staff at increased risk. Hospitals and clinics might resort to pen and paper, cancel appointments, and divert patients elsewhere until systems are restored.
About Academic Urology & Urogynecology
Academic Urology operates 13 clinics across Arizona that specialize in prostate, bladder, and kidney conditions. The clinics are located in Phoenix, Glendale, Scottsdale, Anthem, Buckeye, Peoria, Wickenburg, and Sun City.
