Vann Virginia Center for Orthopaedics, PC
ent_6f2fc7f4f7c91bad7c5731a5
Disclosures
3
HHS OCR · State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
15,264
nationwide · HHS OCR VA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Vann Virginia Center for Orthopaedics, PC
- Normalized
- vann virginia center for orthopaedics— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- VIRGINIAHHS OCRas victim2024-11-22
Atlantic Orthopaedic Specialists (Vann Virginia Center for Orthopaedics, PC) reported to HHS on 2024-11-22 a Hacking/IT Incident affecting 15,264 individuals. An employee was targeted by an email phishing scheme that compromised PHI including names, addresses, dates of birth, driver's license and Social Security numbers, claims information, diagnoses/conditions, lab results, and medications. Breached information located on Email. The CE notified HHS, affected individuals, and media; posted substitute notice; and implemented additional safeguards with staff retraining.
- Montana State AGas victim2024-11-22
Vann Virginia Center for Orthopaedics, PC (dba Atlantic Orthopaedic Specialists) notified Montana residents of a data breach involving unauthorized access to a corporate email account. The incident, detected on August 6, 2024, involved the potential removal of personal and protected health information between June 20 and August 6, 2024. The organization engaged external cybersecurity professionals for forensic investigation.
- Illinois State AGas victim2024-11-01
VANN VIRGINIA CENTER FOR ORTHOPAEDICS, PC DBA. ATLANTIC ORTHOPAEDIC SPECIALISTS filed a data-breach notice with the Illinois Attorney General in November 2024 (case 24-11-039). The register records the breach as discovered on June 20, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.