Concord Orthopaedics

Concord Orthopaedics reported to HHS on 2025-03-25 a Hacking/IT Incident affecting 72815 individuals. Breached information located on Network Server.

Concord Orthopaedics reported a data breach to the Indiana Attorney General. The breach occurred on 2024-11-21 and was reported on 2025-03-25. 12 Indiana residents were affected. 73 individuals affected in total.

Concord Orthopaedics notified patients that an unauthorized actor accessed a third-party patient registration software on November 21, 2024. Potentially impacted data includes names, DOBs, SSNs, appointment info, health insurance details, and driver's license images. Concord engaged forensic specialists, reset passwords, notified law enforcement, and offered 12 months of credit monitoring.

Concord Orthopaedics reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-25. 1,517 Massachusetts residents were affected.

Concord Orthopaedics notified patients of a data breach involving a third-party patient registration software vendor. On November 21, 2024, Concord learned an unauthorized actor accessed the vendor's system, potentially viewing patient registration data including names, DOBs, SSNs, and insurance info. Concord's internal systems were not compromised. Concord engaged forensic specialists, reset vendor passwords, notified law enforcement, and offered 12 months of credit monitoring via Experian.

Medical records and personal data of all patients from 2018 More than 30,000 identity documents https://www.concordortho.com/ Company representative should follow the instructions to contact us before time runs out

Concord Orthopaedics notified the NH Attorney General of an inadvertent email misdelivery on March 1, 2018. An employee unintentionally forwarded an email string containing personal medical information (appointment details) for two New Hampshire residents to an outside attorney instead of an internal staff member. The attorney deleted the email within an hour. Affected individuals were notified by phone on March 12, 2018, and by mail on March 16, 2018.