DJO, LLC

DJO Global, Inc. reported a data breach occurring November 8-9, 2020, discovered November 16, 2020. Cyber criminals exfiltrated personal information including names, SSNs, driver's license numbers, health insurance info, and financial account data. DJO engaged a cybersecurity firm, strengthened security measures, and offered 24 months of credit monitoring via TransUnion. No evidence of misuse was found at the time of notification.

DJO Global, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2020-12-23. The breach occurred from 11/8/2020 to 11/9/2020. 1 Montana residents were affected.

DJO, LLC (CA) reported to HHS on 2020-10-16 that an employee of its former business associate was the victim of an email phishing attack affecting the ePHI of 3,429 individuals. Breached information was located in Email. Exposed data included names, Social Security numbers, dates of birth, addresses, health insurance information, and medical diagnoses and treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. OCR obtained assurances that corrective actions were implemented.

DJO, LLC, a supplier of durable medical equipment, reported to HHS on January 6, 2018, a breach affecting 1,203 individuals. The incident involved the loss of paper forms by its business associate, Total Orthopedics. The breached protected health information included demographic and clinical information, product order dates, health insurer details, and health insurance indemnification numbers, which could potentially match social security numbers.