[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2d77p9c1p1pfy":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":17,"affectedCount":17,"affectedCountStatus":18,"affectedCountLowerBound":19,"affectedCountUnit":20,"hasEnglishDescription":4,"severity":21,"dataClasses":22,"description":28,"seoTitle":29,"seoTitleEn":30,"seoDescription":29,"seoDescriptionEn":31,"logoUrl":32,"isVerified":4,"isSensitive":4,"isSpamList":33,"isMalware":33,"company":34},"6a706ed68fa880e5a077e056","OrthopaedicSpecialistsConnecticut2025","Orthopaedic Specialists of Connecticut 2025 Data Breach","orthopaedic-specialists-connecticut-2025","ctorthopaedic.com","2025-03-02T00:00:00.000Z","2026-08-03T10:35:02.515Z","HHS OCR, archived official OSC notice, and independent event reporting","https:\u002F\u002Focrportal.hhs.gov\u002Focr\u002Fbreach\u002Fbreach_report.jsf",[14,16],"https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20250430180031\u002Fhttps:\u002F\u002Fctorthopaedic.com\u002Fdata-security",22541,"known",null,"people","Medium",[23,24,25,26,27],"Names","Dates of birth","Social security numbers","Health insurance information","Medical information","\u003Cp>\u003Cstrong>The 2025 Orthopaedic Specialists of Connecticut data breach\u003C\u002Fstrong> involved unauthorized access to the healthcare provider's network environment on March 2, 2025. The organization detected the event that day, and its forensic investigation found that the unauthorized party may have acquired certain data.\u003C\u002Fp>\u003Cp>The U.S. Department of Health and Human Services Office for Civil Rights records the event as a network-server Hacking\u002FIT Incident affecting 22,541 people. The organization's notice says identity, health-insurance, and medical information may have been involved.\u003C\u002Fp>\u003Ch2>How was the OSC data breach confirmed?\u003C\u002Fh2>\u003Cp>Orthopaedic Specialists of Connecticut's archived official notice connects the March 2 network access, the response launched that day, and the disclosed data fields in one event. The HHS OCR entry confirms the Connecticut healthcare provider, the April 23, 2025 report date, and the total of 22,541 people.\u003C\u002Fp>\u003Cp>An independent event summary corroborates the same organization, event date, count, and data categories. The initial access date, completion of the scope review in April, and the April 23 consumer notice represent different stages and are not collapsed into a single publication date.\u003C\u002Fp>\u003Ch2>What happened on March 2, 2025?\u003C\u002Fh2>\u003Cp>An unauthorized party gained access to OSC's network environment on March 2. After detecting the event, the organization secured the network and engaged a specialist forensic incident-response firm to investigate the scope of unauthorized activity.\u003C\u002Fp>\u003Cp>The investigation concluded that the intruder may have acquired certain data. The public notice does not disclose the initial access method, the technical weakness used, or how long access lasted during the day, so no unconfirmed attack method is stated in this record.\u003C\u002Fp>\u003Ch2>What information may have been involved?\u003C\u002Fh2>\u003Cp>Depending on the person, potentially affected information included first and last names, dates of birth, Social Security numbers, health-insurance identification numbers, and medical information. The official notice expressly lists these fields as potentially exposed.\u003C\u002Fp>\u003Cp>The organization says the combination of affected fields differed by individual. Email addresses, passwords, physical addresses, payment cards, and financial accounts are not included because the official event notice does not confirm those categories.\u003C\u002Fp>\u003Ch2>Why do these details matter?\u003C\u002Fh2>\u003Cp>Social Security numbers exposed together with health-insurance and medical information can increase the risk of identity theft, fraudulent healthcare claims, or insurance fraud. Some of these identifiers are difficult to change, making long-term monitoring appropriate.\u003C\u002Fp>\u003Cp>Someone who knows a real treatment or insurance detail may craft a more convincing message claiming to represent OSC, a physician, or an insurer. Possessing those details does not prove authority, and unexpected requests should be verified through an independent channel.\u003C\u002Fp>\u003Ch2>How did the organization respond?\u003C\u002Fh2>\u003Cp>OSC secured its network, worked with external forensic specialists, and said it reviewed and strengthened its technical safeguards. After completing its scope review, the organization sent written notices to people whose information may have been involved.\u003C\u002Fp>\u003Cp>The organization offered eligible individuals 12 months of complimentary credit monitoring and identity-theft protection. Its April 23 notice said it had received no reports of misuse or related identity theft; that statement does not guarantee that misuse will not occur later.\u003C\u002Fp>\u003Ch2>What should affected people do?\u003C\u002Fh2>\u003Cp>Notice recipients should regularly review credit reports, financial accounts, and health-insurance explanations for accounts, transactions, services, or claims they do not recognize. Suspicious entries should be reported to the relevant financial institution, healthcare provider, or insurer.\u003C\u002Fp>\u003Cp>Do not share a Social Security number, health information, password, or one-time verification code in response to an unexpected email, message, or call. A request claiming to come from OSC should be verified using contact details on the organization's official website rather than links or numbers in the message.\u003C\u002Fp>","","OSC Connecticut 2025 Data Breach (22.5 Thousand People Affected)","The OSC Connecticut data breach may have exposed identity, health-insurance, and medical information belonging to 22,541 people.","\u002Fuploads\u002Flogo\u002Forthopaedic-specialists-connecticut-official.webp",false,{"name":35,"sector":36,"country":37,"website":38,"websiteArchiveUrl":29,"websiteStatus":29,"websiteCheckedAt":19},"Orthopaedic Specialists of Connecticut","Healthcare","United States","https:\u002F\u002Fctorthopaedic.com\u002F"]