A cyberattack on New Jersey law firm Greenbaum Rowe Smith & Davis has exposed data on 12,801 patients across three health systems in the state.
Greenbaum discovered unauthorized access to its systems through a compromised user account in November 2025 and traced the intrusion to Nov. 25-27, 2025, according to the firm’s notification. Affected organizations include Edison, N.J.-based Hackensack Meridian Health, Morristown, N.J.-based Atlantic Health and Trinitas Regional Medical Center in Elizabeth, N.J., part of West Orange, N.J.-based RWJBarnabas Health.
An investigation completed in April found an unauthorized third party accessed patient names, addresses, medical record numbers, medical history, provider details, medical bill amounts and health insurance information. For a subset of individuals, Social Security numbers or dates of birth also were exposed, Greenbaum said.
HHS’ Office for Civil Rights breach portal lists the incident as affecting 12,801 individuals. Greenbaum said it has found no evidence the data was published or misused, and the firm is notifying affected patients by mail while offering identity theft protection services and a dedicated call center.
“We were concerned to learn of a data security incident at one of our legal service providers, the law firm Greenbaum Rowe Smith & Davis, which may have involved information belonging to some of our patients,” a Hackensack Meridian Health spokesperson told Becker’s. “While this incident did not occur on Hackensack Meridian Health’s systems, we are in close contact with Greenbaum, which is managing the response.”
An Atlantic Health spokesperson referred Becker’s to Greenbaum for information. Trinitas Regional confirmed the incident to NJBiz.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
