Illinois Bone & Joint Institute, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2024-08-30. The breach occurred from 5/30/2024 to 7/4/2024. 17 Montana residents were affected.
Affected (this filing): 17
Clustered 7 filings across 5 jurisdictions · filing window Aug 30, 2024 → Dec 19, 2024. View entity profile → Other incidents for this victim →
incident inc_d90414da5c3e47e0 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA IL MT NH VT
HHS OCR · State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
May 30, 2024 → Jul 4, 2024
When the intrusion reportedly occurred, per the linked filings
Jul 4, 2024
Reported by VERMONT AG, NEW HAMPSHIRE AG, CALIFORNIA AG filings
Illinois Bone & Joint Institute, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2024-08-30. The breach occurred from 5/30/2024 to 7/4/2024. 17 Montana residents were affected.
Affected (this filing): 17
Illinois Bone and Joint Institute, LLC notified consumers of a data breach where unauthorized access occurred between May 30 and July 4, 2024. Personal information including names, SSNs, DOBs, and medical/insurance data was accessed. The company engaged forensic experts, notified law enforcement, and offered one year of credit monitoring.
Illinois Bone & Joint Institute, LLC reported to HHS on 2024-08-30 a Hacking/IT Incident affecting 665,321 individuals. Breached information located on Network Server. The cyber-attack exposed PHI including names, addresses, birthdates, SSNs, diagnoses, lab results, and medications. The entity notified HHS, individuals, and media, provided free credit monitoring, and implemented additional safeguards.
Affected (this filing): 665,321
Illinois Bone & Joint Institute, LLC reported unauthorized access to its network between May 30 and July 4, 2024. The incident affected the personal information of 6 New Hampshire residents. IBJI detected the breach on July 4, 2024, retained cybersecurity experts, notified law enforcement, and offered credit monitoring to affected individuals.
Affected (this filing): 6
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Illinois Bone & Joint Institute, LLC (IBJI) detected unauthorized access to its network on July 4, 2024. Investigation revealed an unauthorized third party accessed the network between May 30, 2024, and July 4, 2024, and acquired certain files containing personal information including names and other data elements. IBJI secured systems, retained cybersecurity experts, and notified law enforcement. Affected individuals are offered one year of complimentary credit monitoring.
Illinois Bone & Joint Institute, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2024-12-19. The breach occurred from 05/30/2024 to 07/04/2024. 60 Montana residents were affected.
Affected (this filing): 60
Illinois Bone & Joint Institute, LLC reported unauthorized access to its network between May 30 and July 4, 2024. The incident involved the acquisition of personal information including names and other data elements. The company secured systems, retained cybersecurity experts, notified law enforcement, and offered one year of Experian IdentityWorks credit monitoring to affected individuals.