Northern Rockies Orthopaedics
bd_2c4bdf7b6de34217 · schema v1 · pii pii-v1
Full breach record for Northern Rockies Orthopaedics →Northern Rockies Orthopaedics notified Montana residents of a data breach where unauthorized access to two employee email accounts occurred. The incident was detected on August 12, 2021, after unusual activity was found. The attacker accessed emails containing patient names and addresses. NRO engaged forensic investigators, changed credentials, and implemented MFA. Affected individuals were offered 12-24 months of credit monitoring and identity theft protection.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 12, 2021
Discovered
May 17, 2022
Filed
vs. sector median
+29 wks slower
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- HHS OCRbd_9099b25a452e6baa2022-05-17Verified
- Indiana State AGbd_95df0bb50258ad902022-05-12 · +5dVerified
Filing propagation · 3 filings · 2 states
View merged incident ↗Pattern: first filing May 12 (IN), last May 17 (MT) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.