COARC Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating NYSARC, Inc. Columbia County Chapter, which does business as COARC, regarding its recent data breach. The COARC data breach involved sensitive personal identifiable information and protected health information belonging to over 5,700 individuals.


COARC is a health care and health service provider specializing in supporting people with intellectual and developmental disabilities. As the Columbia County Chapter of The Arc New York, COARC offers daycare, preschool, and day services as well as in-home and self-directed services. Additionally, COARC provides employment services connecting individuals with employers. Founded in 1965, COARC began as an organization aiming to provide services for children with disabilities. Today, COARC has expanded to children and adults, offering additional services focused on developing employment skills and daily life activities. Headquartered in Mellenville, New York, COARC has 5 locations and serves approximately 500 individuals.


On July 19, 2022, COARC discovered that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its systems may have been accessed. Through its investigation, COARC determined that an unauthorized actor may have accessed this sensitive information on July 19, 2022 through a ransomware attack. On April 26, 2023, COARC began contacting individuals whose information may have been impacted. The type of information exposed includes:

  • Name
  • Social Security number
  • Financial account information
  • Driver’s license number
  • Passport number
  • Student information
  • Medical information

If you received a breach notification letter from NYSARC, Inc. Columbia County Chapter d/b/a COARC:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the COARC data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by NYSARC, Inc. Columbia County Chapter d/b/a COARC;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: