MalwareRansomwareRansom DemandedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
OrthopedicsNY, LLP
bd_78c216c20774f7ea · schema v1 · pii pii-v1
Full breach record for OrthopedicsNY, LLP →OrthopedicsNY, LLP, an orthopedics practice in New York, notified former employees of a ransomware incident detected on December 28, 2023. The attacker infiltrated the network and demanded ransom. Exposed data included names and Social Security Numbers or Taxpayer Identification Numbers. The investigation concluded December 5, 2024. The company engaged forensic investigators and is offering 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday51 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_17528378f6f8ef16Montana State AGfiled 2024-12-17Verified by operator
- bd_9e5c3b9e5805f06aNew Hampshire State AGfiled 2024-12-17Verified
- bd_d766e9a015ac16a1Maine State AGfiled 2024-12-17Verified by operator
- bd_11c404a4381e416bNew Hampshire State AGfiled 2024-11-04(43d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 43d gap
- bd_b100a503c1c16931Montana State AGfiled 2024-11-04(43d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-12-17-orthopedicsny-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 17, 2024
- Raw hash
- de12d4f7b436ce90b7a18b060f9a0d77838afaa1ddebf35452fbf298b93201d6
Reporting entity
- Name
- OrthopedicsNY, LLPnorm: orthopedicsny
Victim entity
- Name
- OrthopedicsNY, LLPnorm: orthopedicsny
Incident
- Discovered
- Dec 28, 2023
- Materiality determined
- Dec 13, 2024
- Notification sent
- Dec 13, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 51 weeks(355 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.