Southern Orthopaedic Associates

Southern Orthopaedic Associates d/b/a Orthopaedic Institute of Western Kentucky reported to HHS on 2021-12-20 a Hacking/IT Incident affecting 106,910 individuals. Breached information located on Email. Employees were victims of an email phishing attack compromising PHI including names, addresses, DOB, driver's license numbers, SSNs, claims, financial info, diagnoses, lab results, medications, and health insurance info. The entity notified HHS, individuals, and media, provided credit monitoring, and implemented security safeguards.

Affected (this filing): 106,910

Southern Orthopaedic Associates, doing business as Orthopaedic Institute of Western Kentucky, experienced an external system breach on June 24, 2021. The breach was discovered on October 21, 2021, and affected 106,910 individuals, including one resident of Maine. The compromised information included names and Social Security numbers. The company began notifying affected individuals on December 20, 2021, and offered identity theft protection services.

Affected (this filing): 1

Southern Orthopaedic Associates dba Orthopaedic Institute of Western Kentucky reported a data breach to the Montana Attorney General. The breach was reported on 2021-12-20. The breach occurred from 6/24/2021 to 7/8/2021. 3 Montana residents were affected.

Affected (this filing): 3