EmergeOrtho

EmergeOrtho, an orthopedic practice in North Carolina, notified individuals of a ransomware attack detected on May 18, 2022. Unauthorized access resulted in exposure of PII including SSNs, names, addresses, DOBs, and in some cases medical records or financial account numbers. The company engaged forensic investigators, coordinated with the FBI, and offered credit monitoring.

EmergeOrtho, a healthcare provider, reported a data breach affecting 75,200 individuals. The breach, which occurred on May 18, 2022, and was discovered on August 19, 2022, was described as an external system breach or hacking incident. The compromised information included names combined with financial account or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. EmergeOrtho began notifying affected individuals in writing on August 25, 2022, and offered 12 months of credit monitoring and identity theft protection services through Sontiq/Cyberscout.

EmergeOrtho reported to HHS on 2022-08-25 a Hacking/IT Incident affecting 68,661 individuals. Breached information located on Network Server. The incident involved a ransomware attack encrypting PHI including names, addresses, DOB, driver's license numbers, SSNs, and diagnoses. The entity notified HHS, individuals, and media, and provided credit monitoring.

EmergeOrtho reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-05-25. 45 Massachusetts residents were affected. The report records the breach type as electronic.