Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C data breach. According to dark web monitoring sources, a hacker group calling itself Booba Project claimed responsibility for a cyberattack on ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C in a post first observed in October 2026, alleging it had gained access to internal company systems. As of this writing, ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C
Associated Gastroenterologists of Central New York, P.C. is a gastroenterology group medical practice established in 1975, specializing in digestive disorders. Headquartered in Camillus, New York, the practice also operates offices in East Syracuse, Liverpool, and Fayetteville, NY. It employs between 51 and 200 people, with approximately 15 physicians across gastroenterology, internal medicine, endocrinology, and nurse practitioner specialties. The practice operates two ambulatory surgery centers affiliated with St. Joseph’s Hospital and provides diagnostic and therapeutic endoscopic procedures including colonoscopy, upper GI endoscopy, and ERCP.
What Happened?
On October 1st, 2026, Ransomware.live reported that the Booba Project ransomware group posted Associated Gastroenterologists of Central New York, P.C. to its dark web leak site. The group claims to have stolen 70 GB of data described as “Medical Practices Stolen data.” This is an unverified, attacker-side allegation only. The organization has not publicly confirmed any breach or ransomware incident, and no corroborating sources — including regulator filings, news reports, or HHS OCR portal entries — have been found. The specific types of data allegedly involved have not been confirmed by any independent source.
Booba Project is a relatively new ransomware operation first tracked in June 2026. It operates a double-extortion model involving both data exfiltration and encryption, and has claimed approximately 36 victims across sectors including healthcare, manufacturing, government, and hospitality. Analyst assessments describe it as an emerging ransomware group with limited technical reporting publicly available. It is also important to note that a similarly named but entirely separate practice — Gastroenterology & Hepatology of Central New York — experienced a confirmed cybersecurity incident in March 2026 attributed to a different ransomware group, Exitium. That incident involves a different organization and should not be confused with this allegation.
Key Facts at a Glance
- Company or Organization: Associated Gastroenterologists of Central New York, P.C.
- Industry: Healthcare – Medical Practices (Gastroenterology)
- Location: Camillus, New York (with offices in East Syracuse, Liverpool, and Fayetteville, NY)
- Incident type: Ransomware claim (double-extortion) — unverified dark-web allegation
- Source: Ransomware.live – Booba Project claim against Associated Gastroenterologists; SOCRadar – Booba Project Ransomware Group Profile; Alvaka – Booba Project Ransomware Recovery Services
What Should You Do?
If you believe you may have been a patient or otherwise had personal information held by Associated Gastroenterologists of Central New York, P.C., it is a good idea to take protective steps now even while the allegation remains unconfirmed. You can place a free fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. Review your credit reports for unfamiliar activity at AnnualCreditReport.com. Because this is a medical practice, you should also review any Explanation of Benefits statements from your insurer and request copies of your medical records to check for any errors or unfamiliar entries that could indicate misuse of your health information. If you spot signs of identity theft or fraud, report them at IdentityTheft.gov for a personalized recovery plan.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
