Central Texas Pediatric Orthopedics data breach (2025)

TEXASHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed Apr 4, 2025bd_cd22638e90fb3588

Central Texas Pediatric Orthopedics (TX) reported to HHS OCR on 2025-04-04 a ransomware attack affecting 140,000 individuals. PHI located on a Network Server was compromised, including names, dates of birth, x-ray images, and other treatment information. The entity is a pediatric orthopedics provider, so affected records likely involve minors. The CE notified HHS, affected individuals, and the media, posted substitute notice, and responded by revising security policies and implementing new technical safeguards.

Affected (this filing): 140,000

HHS notified

🏎️Indiana State AGlinked via same-victim cross-source · 100%

🍁Vermont State AG

Filed Apr 11, 2025bd_551bf391d53d48b9

Central Texas Pediatric Orthopedics notified patients of a security incident where an unauthorized actor accessed systems from Jan 23-26, 2025. Affected data included minors' names, dates of birth, and x-ray images. The company engaged forensic investigators, notified the FBI, and implemented security enhancements including EDR and password resets.

VT AG >45 bday

🦞Maine State AGlinked via tight-window match · 100%

Filed Apr 14, 2025bd_5b8d595e8bd4a4d2

Central Texas Pediatric Orthopedics reported a data breach impacting 9 Maine residents. The breach, which occurred between January 23, 2025, and January 26, 2025, was discovered on February 4, 2025. The incident was described as an external system breach (hacking). Affected individuals were notified on April 11, 2025.

Affected (this filing): 9

ME AG >30d · 69dME resident >60d · 66d

Central Texas Pediatric Orthopedics

Litigation Timing

Sensitive data

Timeline