Aligned Orthopedic Partners 2025 Data Breach
The Aligned Orthopedic Partners 2025 data breach concerns unauthorized access to the email environment used by ASC Ortho Management Company, LLC under the Aligned Orthopedic Partners name.
Exposed Data Types
9 sensitive15- Medicaid or Medicare numbers
- Medical provider names
- Mental or physical conditions
- Medical treatment information
- Diagnosis or clinical information
- Prescription information
- Health insurance information
- Patient account numbers
- Medical record numbers
- Full names
- Dates of birth
- Social security numbers
- Driver's license or state ID numbers
- Financial account numbers
- Dates of service
About This Breach
According to the organization's official notice, unusual activity was identified on 8 December 2025. The investigation found that an unknown person may have accessed certain emails and files between 16 November and 16 December 2025.
The U.S. Department of Health and Human Services Office for Civil Rights (HHS/OCR) lists the event as a hacking or IT incident involving email and reports 7,213 affected people. This is a person count, not a count of accessed emails, files, or individual data fields.
What information may have been involved?
The official notice says the information varied by person. The listed categories include names, dates of birth, Social security numbers, driver's license or state identification numbers, and financial account numbers. Medicaid or Medicare numbers, patient account and medical record numbers, dates of service, provider names, health conditions, treatment, diagnosis or clinical information, prescription information, and health insurance information may also have been involved. The list does not mean that every category applied to all 7,213 people.
Organization response and safe next steps
Aligned Orthopedic said it investigated with external cybersecurity specialists, strengthened security measures, and was not aware of misuse when it issued the official notice. People who received a notice should use their individual letter as the primary source for their specific data scope and protection options. Financial accounts, credit reports, and health insurance statements can be reviewed for unfamiliar transactions or services. Unexpected messages claiming to represent the organization should be verified through a current official contact channel without using links in the message.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
