Northeast Orthopedics and Sports Medicine recently experienced a data security incident affecting 177,101 individuals.
The orthopedic group, which has nine locations throughout New York, said it launched an investigation after observing unusual activity on its computer network. On Dec. 29, the practice learned of potential unauthorized access to certain data on its network. This data may include patient information such as identifying information, payment and medical record information, health insurance information, and treatment and diagnosis information, according to a Feb. 9 notice on the organization's website.
In addition to mailing letters to potentially impacted individuals with more information, the practice said it has taken steps to re-secure its network and implement additional precautions. It is also reviewing policies and procedures related to data protection.
Northeast Orthopedics and Sports Medicine submitted the incident Feb. 27 to the U.S. Department of Health and Human Services Office for Civil Rights Breach Portal.