Vail Summit Orthopaedics
ent_5adf5844b20c845513d0b69d
Disclosures
6
HHS OCR · State AG · 4 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
5,044
nationwide · HHS OCR CO
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Vail Summit Orthopaedics
- Normalized
- vail summit orthopaedics— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- COLORADOHHS OCRas victim2025-07-31
Vail Summit Orthopaedics reported to HHS on 07/31/2025 a Hacking/IT Incident affecting 5044 individuals. Breached information located on Email.
- Massachusetts State AGas victim2025-07-31
Vail Summit Orthopaedics reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-07-31. 5 Massachusetts residents were affected.
- Illinois State AGas victim2025-07-01
VAIL SUMMIT ORTHOPAEDICS filed a data-breach notice with the Illinois Attorney General in July 2025 (case 25-07-337). The register records the breach as discovered on July 24, 2025. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- COLORADOHHS OCRas victim2024-03-04
Vail Summit Orthopaedics, LLC reported to HHS on 2024-03-04 a Hacking/IT Incident affecting 1138 individuals. Breached information located on Network Server.
- Massachusetts State AGas victim2024-02-05
Vail Summit Orthopaedics & reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-02-05. 2 Massachusetts residents were affected.
- Vermont State AGas victim2024-01-30
Vail Summit Orthopaedics, LLC notified consumers of a January 4, 2024 network intrusion where an unauthorized third party accessed files containing names, addresses, and Social Security numbers. The company isolated its network, engaged a cybersecurity firm, and is offering 12 months of credit monitoring. Investigation is ongoing.