Family Medical Associates of Raleigh Data Breach: No Lawsuit Filed Yet
Reference Guide
An outside actor was inside the systems of Family Medical Associates of Raleigh, a Raleigh, North Carolina family practice, from April 18 to April 20, 2026, and downloaded data. The practice spotted it on May 7, 2026. As of October 18, 2026, attorneys are investigating, but we found no filed lawsuit, no settlement and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Happened at Family Medical Associates of Raleigh
Family Medical Associates of Raleigh, PA (FMAR) is a multi-provider family medical practice in Raleigh. In its updated notice, the practice says it became aware of suspicious activity on May 7, 2026, and that an unauthorized actor gained access to its computer systems between April 18 and April 20, 2026 and “also downloaded certain information.”
The categories the practice lists are broad: names, addresses, dates of birth, Social Security or taxpayer ID numbers, lab results, diagnoses and treatment history, prescriptions, medical record numbers, Medicare or Medicaid IDs, health insurance numbers, financial account numbers (without access information) and even biometric and genetic data. The practice notes these are general categories and not every item applies to every person.
A ransomware group calling itself Genesis claimed responsibility. That is the group’s own claim; the practice has not named an attacker. FMAR says there is no evidence any information has been misused for identity theft or fraud.
Case details
No lawsuit has been filed that we could find. As of October 18, 2026, there is no complaint, no court and no case number. Plaintiff-side attorneys have been publicly seeking affected patients since at least October 5, 2026 to decide whether a class action can be filed — that is a pre-filing investigation, not a case.
We checked our database of new federal civil filings and found no case naming the practice. A filing in Wake County state court would not appear there, so we will update this page if a complaint surfaces.
Status: Breach Reported, No Case Yet
The breach was reported to the U.S. Department of Health and Human Services, whose public breach portal lists 500 individuals affected, submitted July 2, 2026. Treat that number with care: as of August 12, 2026, HIPAA Journal reported the total was still unknown because the review had not finished. The practice later issued an updated notice with a longer list of data types, and copies went to state regulators in Massachusetts and Vermont — the Vermont filing is dated October 2, 2026.
Who Is Affected
Patients of Family Medical Associates of Raleigh whose records sat on the systems accessed between April 18 and April 20, 2026. Because no lawsuit exists, there is no class to join and nothing to sign up for.
The practical test is a letter or a call. If you received a notice from FMAR, keep it — it shows which of your details were involved. If you are unsure, the practice’s notice lists a question line: 888-619-1587, Monday to Friday, 9 am to 9 pm Eastern. Not to be confused with Raleigh Family Practice, a different practice.
Is There Money?
Family Medical Associates of Raleigh Breach Timeline
April 18–20, 2026 — Systems Accessed
An unauthorized actor gets into FMAR's computer systems and downloads certain information, per the practice's notice.
May 7, 2026 — Suspicious Activity Found
The practice detects the activity, resets credentials, isolates systems, contacts law enforcement and brings in security professionals.
June 3, 2026 — Ransomware Group Claims Attack
The Genesis group claims it took data from the practice. This is the attackers' claim, not a finding by the practice.
July 2, 2026 — Website Notice and HHS Report
FMAR posts a notice on its website. The HHS breach portal records the report the same day, listing 500 individuals.
October 2, 2026 — Vermont Filing, Attorneys Investigate
A Vermont Attorney General filing is dated October 2, 2026. An updated FMAR notice (undated in the copy we saw) lists more data types, including Social Security numbers and lab results. Attorneys were publicly seeking affected patients by October 5, 2026.
October 18, 2026 — No Lawsuit Found
We found no complaint in any court, and no settlement, fund or claim form exists.
Three Things to Watch For
A small medical-practice breach with Social Security numbers and insurance IDs in the files invites follow-up fraud:
“Claim your FMAR settlement” offers
There is no settlement and no claims site. Anyone asking for your Social Security number or a fee to “secure your payment” is not connected to any court.
Calls pretending to be the practice
A caller who knows you are a patient may use that to sound legitimate. Hang up and call the number printed on your notice letter or the practice's main line yourself.
Medical bills for care you never received
Insurance and Medicare or Medicaid IDs were among the listed data. Check every explanation-of-benefits statement; a visit or prescription you do not recognize is how medical identity theft shows up.
Family Medical Associates of Raleigh Data Breach — Questions
Short answers to the questions people ask most about this case.
Is there a Family Medical Associates of Raleigh data breach lawsuit?
Not that we could find as of October 18, 2026. Attorneys are investigating whether a class action can be filed, but there is no complaint, court or case number yet.
What happened and when?
An unauthorized actor accessed the practice's systems between April 18 and April 20, 2026 and downloaded information. The practice discovered it on May 7, 2026 and first posted a notice on July 2, 2026.
What information was exposed?
Per the updated notice, categories include names, addresses, dates of birth, Social Security or taxpayer ID numbers, lab results, diagnoses, prescriptions, medical record numbers, Medicare or Medicaid IDs, insurance numbers, financial account numbers and biometric or genetic data. Not every category applies to every person.
How many people were affected?
The HHS breach portal lists 500 individuals. As of August 12, 2026 the review was still incomplete, so that figure may not be final.
How can I check if I have been data breached?
Look for a notice letter from Family Medical Associates of Raleigh. If you were a patient and are unsure, call the line in the practice's notice, 888-619-1587. Free credit reports from each of the three bureaus, available once every 12 months, will show accounts you did not open.
How much compensation will I get for a data breach?
For this breach, nothing today — there is no lawsuit, settlement or claim form. If that changes, any payment would come through a court-approved settlement, and affected patients would be notified directly.
Can you sue a hospital or doctor's office for a data breach?
Patients do file such suits, usually as class actions alleging the provider failed to protect their records — see our page on Radiology Associates of Richmond, for example. Whether a case against this practice will be filed is not yet known.
What should I do right now?
Keep any notice you received. Freeze your credit at the three bureaus, which is free. Read your insurer's explanation-of-benefits statements for care you never received. Ignore anyone offering to file a settlement claim for you.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Raleigh Family PracticeA different Raleigh practice, often confused with this one
- Data Breach Settlement CalculatorEstimate what comparable health-data settlements have paid
- Open Class Action SettlementsSettlements currently accepting claims, with deadlines
- Settlement Payout CalculatorHow fund size and claim rates set per-person payments