Anesthesia Associates of Morristown Data Breach
The 2025 Anesthesia Associates of Morristown data breach involved physical patient records that a service provider mistakenly placed in an unsecured dumpster. The records were recovered the following day and moved to a secure location under law-enforcement supervision.
Exposed Data Types
2 sensitive8- Medical information
- Health insurance information
- Names
- Physical addresses
- Dates of birth
- Social security numbers
- Financial account information
- Government issued IDs
About This Breach
Anesthesia Associates of Morristown (AAM) is a New Jersey anesthesia provider. The incident occurred at HSS Services, a billing-services company that handled patient information for AAM.
When did the incident occur?
According to HSS's official notice, materials damaged by a February 2025 flood were moved to a warehouse. On March 3, a cleanup company inadvertently removed boxes containing medical records and placed them in an unsecured dumpster. The records were recovered on March 4 and moved to a secure location under police supervision.
What information may have been affected?
Depending on the individual, the records may have included names, addresses, dates of birth, Social Security numbers, financial-account information, health-insurance information, Medicare or Medicaid identifiers, and health information such as diagnoses or treatment. Not every category applied to every person.
How many people were affected?
The current U.S. Department of Health and Human Services breach record reports 34,675 affected individuals.
What happened to the records?
The official notice says the dumpster was located at a municipal complex under continuous video surveillance. After a person looked inside on March 4, police were notified, the area was secured and the records were recovered under law-enforcement supervision. HSS said it did not believe the personal information was at risk of misuse.
What should affected people do?
Notice recipients should review bank, credit and health-insurance statements for unfamiliar activity. People whose Social Security numbers were involved can also use the offered identity-protection service and monitor their credit reports.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
