gandhofcny.com
Jul 28, 2026
Database breach of Gastroenterology & Hepatology of CNY, P.C. (gandhofcny.com) and Digestive Disease Center of CNY, LLC (ddcofcny.com), a GI practice and AAAHC-accredited endoscopy center in Syracuse, New York. Contains records for 167,303 patients including full names, addresses, phone numbers, SSNs (124,761 records), email addresses, diagnoses (ICD-10 codes), medications, and detailed pathology reports. Highly sensitive medical data includes mental health diagnoses and psychiatric medications, substance abuse records, HIV/AIDS, hepatitis B/C, cancer diagnoses, and sexual health information.
Data found in this dataset
Source files
Expand any file to inspect its column headers and the LLM's field-mapping reasoning, recorded during ingestion.
GASTROHEP__db__diagnoses.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: no·Quote: "
Notes: The file contains only medical diagnosis codes and descriptions with patient IDs. No PII fields (names, addresses, emails, etc.) are present in the visible rows. All entries are clinical diagnoses using ICD-10 codes and descriptive text.
GASTROHEP__db__medications.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: no·Quote: "
Notes: The file contains only medication/prescription data with no patient identifiers. Columns appear to be: 1) medication ID, 2) patient ID, 3) medication name/description, 4) start date, 5) end date, 6) patient name (in some rows). However, none of these columns contain consistent PII patterns across rows. The patient name field (column 6) only appears intermittently and lacks surrounding structure. Without headers or consistent PII patterns, this cannot be mapped to known PII fields. The breach context mentions names, addresses, SSNs, etc., but they are not present in this sample.
GASTROHEP__db__pathology_cases.csv6 columns78,522 rows
File structure
Format: CSV·Delimiter: Comma·Has header: no·Quote: "
| Source column | Mapped field | Confidence | LLM assessment |
|---|---|---|---|
| 0 | skip | high | Internal ID pattern 'S17-' followed by numeric |
| 1 | skip | high | Numeric patient/internal ID |
| 4 | skip | high | Procedure type (non-PII) |
| 5 | fullName | high | Contains full patient names like 'John A Riccio', 'Christopher B Gerlach' |
| 6 | skip | high | Physician name - not patient PII per context |
| 7 | skip | high | Signature status (non-PII) |
Notes: File contains surgical procedure records with patient names but NO explicit addresses, emails, phones, DOB, or SSN visible in sample. Patient identifiers are present in columns 0-1 but redacted here. Full dataset likely contains additional PII columns beyond this sample range.
GASTROHEP__db__pathology_codes.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: no·Quote: "
Notes: This is a medical coding file containing only procedure codes (CPT) and diagnosis codes (ICD). No PII fields are present. The columns appear to be structured as [record_id, patient_id, code_value, code_system, occurrence], but none of these contain personal identifying information.
GASTROHEP__db__pathology_specimens.csv0 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
Notes: The file contains only pathology report data with biopsy/polypectomy details, anatomical locations, and histological findings. No personal identifiable information (PII) such as names, addresses, emails, phone numbers, DOB, SSN, etc., is present in the first 50 rows. All columns contain clinical/pathology data only.
GASTROHEP__db__patients.csv10 columns167,303 rows
File structure
Format: CSV·Delimiter: Comma·Has header: no·Quote: "
| Source column | Mapped field | Confidence | LLM assessment |
|---|---|---|---|
| 0 | skip | high | [0] numeric patient/record ID, internal identifier |
| 1 | fullName | high | [1] values like 'Daly, Christopher J', 'HERLOSKI, PAUL' — last, first format full names |
| 2 | dob | high | [2] values like '3/6/1985', '1/27/1932' — MM/DD/YYYY date of birth |
| 3 | ssn | high | [3] values like '000-56-0000', '113-24-0860' — SSN format NNN-NN-NNNN |
| 4 | address1 | high | [4] values like '105 Eden Roc Cir, Syracuse, NY 13214-2319' — full street address including city/state/zip |
| 5 | phone | high | [5] values like '(H) (315) 452-3235', '(M) (315) 408-7290' — home and mobile phone numbers |
| 6 | skip | high | [6] numeric age values (41, 94, 30...) — derived/calculated field, not direct PII |
| 7 | gender | high | [7] values are 'M' or 'F' — gender codes |
| 8 | high | [8] values like 'MARTHA@GANDHOFCNY.COM', 'djharlander@hotmail.com' — email addresses | |
| 9 | skip | high | [9] values are 0 or 1 — internal flag/indicator |
Notes: No header row present; 10 columns total. Column 1 contains full names in 'LastName, FirstName [Middle]' format — mapped as fullName. Column 4 contains complete address strings (street, city, state, zip) in a single field — mapped as address1. Column 5 often contains multiple phone numbers concatenated (home and mobile) in a single field. Column 9 appears to be a binary flag (0/1), possibly indicating a record variant or data source. SSNs are present for the majority of records per breach context.