HackingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Orthopedic Specialists Of North America, PLLC
bd_92f6df0276dccd5b · schema v1 · pii pii-v1
Full breach record for Orthopedic Specialists Of North America, PLLC →Supplemental state-AG notice for Excelsior Orthopaedics, LLP regarding a cybersecurity incident discovered June 23, 2024. Unauthorized access occurred June 18–27, 2024. 28 New Hampshire residents affected. Data compromised includes names, DOB, driver's licenses, SSNs, and medical/health information. Response included forensic investigation, FBI cooperation, network isolation, credential resets, and 12 months of credit monitoring via CyberScout.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed28 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/excelsior-orthopaedics-20250902.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 2, 2025
- Raw hash
- 7b5a05f674edc0b5e8fe44be0e53c919a807985df41e0ce2c6c8c208e92d500e
Reporting entity
- Name
- Wilson, Elser, Moskowitz, Edelman & Dicker LLPnorm: wilson elser moskowitz edelman dicker
Victim entity
- Name
- Orthopedic Specialists Of North America, PLLCnorm: orthopedic specialists of north america
Incident
- Discovered
- Jun 23, 2024
- Materiality determined
- —
- Notification sent
- Aug 31, 2025
- Affected individuals
- 28
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this incident to the FBI and cooperated with law enforcement investigations
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 months(436 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.