OrthoConnecticut reported a network breach possibly affecting thousands of patients to HHS on April 26.
In a statement on its website, OrthoConnecticut said an unauthorized threat actor gained access to its network from Nov. 24-28 and may have removed files from the network. After conducting a thorough investigation, OrthoConnecticut found the unauthorized individual had access to files containing personal information for 118,141 patients.
The personal information exposed includes names, Social Security numbers, birth dates and medical information. There isn't any evidence that the information has been misused, but the practice is notifying affected individuals to take proactive action.
"Please accept our apologies that this incident occurred," the practice wrote on its website. "OrthoConnecticut remains fully committed to maintaining the privacy of personal information in its possession and has taken many precautions to safeguard it, including continually evaluating and modifying its practices and internal controls."
OrthoConnecticut includes nine practice locations and around 30 physicians.