Excelsior Orthopaedics, LLC

Supplemental notice from Excelsior Orthopaedics, LLP regarding a data breach occurring June 18-27, 2024. Unauthorized access compromised patient and employee data including names, DOBs, SSNs, driver's licenses, and medical/insurance info. The company engaged forensic investigators, reported to the FBI, and is offering credit monitoring. This notice covers additional data types identified in a subsequent review.

Excelsior Orthopaedics, LLP, a healthcare provider in Amherst, NY, notified the Maryland AG of a data security incident discovered on June 23, 2024. The breach compromised patient and employee data, including names, SSNs, driver's license numbers, and biometric information. 18 Maryland residents were identified and notified starting December 31, 2024. The organization engaged forensic investigators, reported to the FBI and HHS/OCR, and offered 12 months of credit monitoring.

Affected (this filing):