DisclosureLens
HackingHealthcareHealthcareData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Concord Orthopaedics

bd_ebe43fb77be9b740 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Nov 21, 2024

Filed

Mar 25, 2025

To disclose

Affected

Not disclosed

Linked

6 filings

Confidence

67%
Full breach record for Concord Orthopaedics2 incidents on file

Concord Orthopaedics notified patients of a data breach involving a third-party patient registration software vendor. On November 21, 2024, Concord learned an unauthorized actor accessed the vendor's system, potentially viewing patient registration data including names, DOBs, SSNs, and insurance info. Concord's internal systems were not compromised. Concord engaged forensic specialists, reset vendor passwords, notified law enforcement, and offered 12 months of credit monitoring via Experian.

Leak gap clock Leak >90d

Incident timeline

Nov 21, 2024

Discovered

Mar 25, 2025

Filed

This filing is one of 6 about the same incident.View merged incident
A leak claim by everest about this victim predates this filing by 120 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 4 states

View merged incident ↗
HHS OCRMar 25 · first
Indiana State AGMar 25 · first
New Hampshire State AGMar 25 · first
Massachusetts State AGMar 25 · first
Nebraska State AGMar 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.