On January 7, 2025, Excelsior Orthopaedics, LLP (“Excelsior”) filed a notice of data breach with the Attorney General of Maine after discovering that an unauthorized actor was able to access the company’s computer network. In this notice, Excelsior explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers, demographic information, driver’s license numbers, medical information, health insurance information, and financial information. Upon completing its investigation, Excelsior began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from Excelsior Orthopaedics, LLP, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Excelsior Orthopaedics data breach. For more information, please see our recent piece on the topic here.
What Caused the Excelsior Orthopaedics Data Breach?
The Excelsior Orthopaedics data breach was only recently announced, and more information is expected in the near future. However, Excelsior’s filing with the Attorney General of Maine provides some important information on what led up to the breach. Excelsior also posted a website notice that provides additional details about the incident.
According to these sources, on June 23, 2024, Excelsior detected suspicious activity within its computer network that appeared to be due to a data security incident. In response, Excelsior contained the incident and then enlisted the help of third-party cybersecurity experts to conduct an investigation.
Excelsior is still investigating the impact of the cyberattack. However, the company has confirmed that an unauthorized party was able to access portions of its network that contained confidential information belonging to patients and current and former employees of Excelsior and its related entities, including Buffalo Surgery Center and Northtowns Orthopaedics.
After learning that sensitive consumer data was accessible to an unauthorized party, Excelsior Orthopaedics reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, demographic information, driver’s license number, medical information, health insurance information, and financial information.
On December 31, 2024, Excelsior Orthopaedics sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About Excelsior Orthopaedics, LLP
Excelsior Orthopaedics is an orthopedic care provider based in Amherst, New York. The practice offers a wide range of services, including orthopedic surgery, sports medicine, physical therapy, occupational therapy, and imaging services. Excelsior Orthopaedics is dedicated to delivering patient-centered care for musculoskeletal conditions, from diagnosis and treatment to rehabilitation and recovery. Excelsior Orthopaedics employs approximately 321 employees and generates an estimated $11 million in annual revenue.
