HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Excelsior Orthopaedics, LLC
bd_72914f9f10127101 · schema v1 · pii pii-v1
Full breach record for Excelsior Orthopaedics, LLC →Supplemental notice from Excelsior Orthopaedics, LLP regarding a data breach occurring June 18-27, 2024. Unauthorized access compromised patient and employee data including names, DOBs, SSNs, driver's licenses, and medical/insurance info. The company engaged forensic investigators, reported to the FBI, and is offering credit monitoring. This notice covers additional data types identified in a subsequent review.
Vermont clock✗ VT AG >45 bday15 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by monti about this victim predates this filing by 436 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_363c3e7a23ad9f0eMaryland State AGfiled 2025-11-13(72d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-09-02-excelsior-orthopaedics-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 2, 2025
- Raw hash
- 486a8e6feba45955ca9122009591782e1500f69227947b769fcd6e8ca3030f2e
Reporting entity
- Name
- Excelsior Orthopaedics, LLCnorm: excelsior orthopaedics
- Domain
- excelsiorortho.com
Victim entity
- Name
- Excelsior Orthopaedics, LLCnorm: excelsior orthopaedics
- Domain
- excelsiorortho.com
Incident
- Discovered
- Jun 23, 2024
- Materiality determined
- Sep 2, 2025
- Notification sent
- Aug 26, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this incident to the FBI and cooperated with law enforcement investigations
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 months(436 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.