Monroe University, H&H Color Lab, Others Announce Breaches
At McShane & Brady, we wanted to make everyone aware of some the most recent data breaches. If you or someone you know who may have been affected by these or any other breaches, please call our office at 816-888-8010 or use our contact form on our website. We want to hold those entrusted with protecting our private information responsible.
Monroe University, New York
Monroe University, a for-profit university with campuses in the Bronx and La Rochelle in New York, has recently confirmed that a cyberattack has resulted in unauthorized access to the personal and health information of approximately 320,973 individuals.
An investigation confirmed that an unauthorized third party had access to its network from December 9, 2024, to December 23, 2024, and exposed files containing sensitive data.
On September 30, 2025, Monroe University confirmed that the data compromised in the incident included names, dates of birth, Social Security numbers, driver’s license numbers, passport numbers, government identification numbers, medical information, health insurance information, electronic account or email usernames and passwords, financial account information, and/or student data.
Notification letters started being sent to those affected on January 2, 2026.
H&H Color Lab
H&H Color Lab, a photo lab and printing service provider located in Raytown, MO, recently notified individuals about a cybersecurity breach that exposed sensitive personal data.
On July 31, 2025, H&H detected suspicious activity in a portion of its computer network.
An investigation was conducted and concluded that an unauthorized third party (1) gained access to a portion of our computer network on the night of July 30, 2025, and (2) accessed or acquired some of the files on our network, according to a filing from the Office of the Maine Attorney General.
According the filing, 2,177 people have been affected by this breach.
Michigan Medical Billing Service
Mid Michigan Medical Billing Service, a Flint, MI-based revenue cycle management company that provides billing support services to HIPAA-covered entities, has recently announced a cyberattack that exposed the sensitive data of patients of its healthcare clients.
Suspicious network activity was identified on March 27, 2025. An investigation was conducted and concluded that an unauthorized third party accessed and copied data from its network.
28,185 individuals protected health information has been exposed in this cyberattack.
If you receive notification of these breaches or any other data breaches, we ask that you call our office at 816-888-8010 or email us at firm@mcshanebradylaw.com.
From hospitals, healthcare providers, government services, service providers to insurance companies, proper precautions and training have not been made to secure these records. Once public, your information is out there for everyone to see. McShane & Brady is leading firm representing those who have affected by a data breach.
