On March 5, 2024, Northeast Orthopedics and Sports Medicine filed a notice of data breach with the Attorney General of Maine after discovering that an unauthorized party was able to access the company’s IT network. In this notice, Northeast Orthopedics explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers, driver’s license numbers, payment information, dates of birth, medical information, and health insurance information. Upon completing its investigation, Northeast Orthopedics began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Northeast Orthopedics and Sports Medicine, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Northeast Orthopedics data breach. For more information, please see our recent piece on the topic here.

What Caused the Northeast Orthopedics Data Breach?

The Northeast Orthopedics data breach was only recently announced, and more information is expected in the near future. However, Northeast Orthopedics’ filing with the Attorney General of Maine provides some important information on what led up to the breach. Northeast Orthopedics also posted a notice on its website discussing the incident.

According to these sources, on November 22, 2023, Northeast Orthopedics detected unusual activity within its computer network. In response, Northeast Orthopedics secured its systems and then began working with third-party data security specialists to investigate the incident.

On December 29, 2023, Northeast Orthopedics concluded its initial investigation, finding that an unauthorized party was able to access portions of its IT network, including files containing confidential patient information.

After learning that sensitive consumer data was accessible to an unauthorized party, Northeast Orthopedics reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, driver’s license number, payment information, date of birth, medical record information, health insurance information, and treatment & diagnosis information.

On February 9, 2024, Northeast Orthopedics sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Northeast Orthopedics and Sports Medicine

Northeast Orthopedics and Sports Medicine is a healthcare provider headquartered in Airmont, New York. Northeast Orthopedics and Sports Medicine provides a wide range of services and treatments targeting ligaments, tendons, muscles, bones and joints, including sports medicine, joint replacement, pain management, and rheumatology. Northeast Orthopedics operates nine facilities throughout Rockland, Orange, and Westchester counties. Northeast Orthopedics employs more than 109 people and generates approximately $15 million in annual revenue.