Central Indiana Orthopedics

Central Indiana Orthopedics, a healthcare provider based in Muncie, Indiana, experienced an external system breach (hacking) between November 4, 2021, and December 10, 2021. The incident compromised the personal information of 83,705 individuals, including names and Social Security Numbers. The breach was discovered on November 4, 2021. The entity notified affected individuals in writing on March 7, 2022, and offered 12 months of identity theft protection and credit monitoring services through IDX. Six Maine residents were specifically affected.

Affected (this filing): 83,705

Central Indiana Orthopedics (IN) reported to HHS OCR on 2022-03-07 a ransomware attack affecting 83,705 individuals. Breached information was located on a Network Server. Impacted PHI included names, addresses, social security numbers, diagnoses, lab results, and medications. The CE notified HHS, affected individuals, and the media. Additional administrative and technical security measures were implemented to protect PHI. OCR provided technical assistance.

Affected (this filing): 83,705

Central Indiana Orthopedics reported a data breach to the Montana Attorney General. The breach was reported on 2022-03-07. The breach occurred on 10/16/2021. 5 Montana residents were affected.

Affected (this filing): 5

Central Indiana Orthopedics experienced a ransomware attack by the Grief threat actor group in October 2021. The incident compromised the protected health information and personal data of approximately 83,705 patients. The organization detected the breach on October 16, 2021, and began notifying affected individuals and regulators in March 2022. Response efforts included engaging forensic investigators and providing credit monitoring services.

Affected (this filing): 83,705