Lakeshore Bone and Joint Institute in Chesterton, Ind., experienced a data breach involving its email system, according to data the organization shared with the Maine attorney general's office Nov. 15.
The practice noticed unusual activity in its Microsoft Office 365 network July 7. The practice took measures to secure its email system and notified 23,627 people of the incident.
The breach potentially exposed birthdates, payer information, treatment cost data and health-related information. An investigation found an "unauthorized actor" accessed one email account on June 14.
The Maine attorney general's office requires companies to report data breaches to it if at least one Maine resident is affected.