Northern Rockies Orthopaedics

Northern Rockies Orthopaedics notified Montana residents of a data breach where unauthorized access to two employee email accounts occurred. The incident was detected on August 12, 2021, after unusual activity was found. The attacker accessed emails containing patient names and addresses. NRO engaged forensic investigators, changed credentials, and implemented MFA. Affected individuals were offered 12-24 months of credit monitoring and identity theft protection.

Northern Rockies Orthopaedics (MT) reported to HHS on 2022-05-17 a Hacking/IT Incident (email phishing) affecting 6,701 individuals. An employee was subject to a phishing attack via email. PHI exposed included names, addresses, dates of birth, driver's license and Social Security numbers, financial information, diagnoses, and medications. The CE notified HHS, affected individuals, and the media, offered identity protection services, and implemented additional safeguards and staff retraining. Location of breached information: Email.

Northern Rockies Orthopaedics reported a data breach to the Indiana Attorney General. The breach occurred on 2021-08-12 and was reported on 2022-05-12. 3 Indiana residents were affected. 6,701 individuals affected in total.