Florida Orthopaedic Institute

Florida Orthopaedic Institute reported to HHS on 2020-07-01 a Hacking/IT Incident affecting 651,527 individuals. Breached information located on Network Server. A ransomware attack affected protected health information (PHI) including names, addresses, dates of birth, drivers’ license numbers, claims information, diagnoses, medical conditions, laboratory results, and medications. The CE implemented additional technical safeguards and conducted employee training.

Florida Orthopaedic Institute notified Montana of a ransomware attack discovered on April 9, 2020. The incident encrypted server data and resulted in the potential access of patient PII, including SSNs, DOBs, and medical records. FOI engaged forensic investigators and offered Kroll identity monitoring services.

Florida Orthopaedic Institute reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-06-22. 731 Massachusetts residents were affected. The report records the breach type as electronic.

Florida Orthopaedic Institute (FOI) experienced a ransomware attack between April 6 and April 9, 2020, which encrypted data on its servers. FOI discovered the incident on April 9, 2020. An investigation concluded on May 6, 2020, that patient personal information, including names, dates of birth, Social Security numbers, and medical information, may have been accessed or taken. FOI engaged third-party forensic investigators and provided identity monitoring services through Kroll to affected individuals.

Florida Orthopaedic Institute notified NH AG of a ransomware attack discovered April 9, 2020. Attack encrypted servers and exfiltrated patient PII (SSN, DOB, medical info). 289 NH residents affected. Notifications sent June 22, 2020. Remediation included enhanced AV, firewalls, and access controls. 12 months credit monitoring offered.

Florida Orthopaedic Institute reported a data breach to the Indiana Attorney General. The breach occurred on 2020-04-06 and was reported on 2020-06-22. 777 Indiana residents were affected. 645,000 individuals affected in total.

FLORIDA ORTHOPAEDIC INSTITUTE filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-241). The register records the breach as discovered on April 19, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.