Aligned Orthopedic Partners Discloses Data Breach Affecting PII and PHI
Aligned Orthopedic Partners (operating as ASC Ortho Management Company LLC) has reported a data breach involving unauthorized access to its email environment. Between November 16 and December 16, 2025, an unknown threat actor compromised the system, potentially accessing sensitive emails and files.
The company detected the breach on December 8, 2025, and launched an investigation with external cybersecurity experts. A review concluded on February 17, 2026, confirming that personally identifiable information (PII) and protected health information (PHI) may have been exposed. Compromised data includes:
- PII: Names, dates of birth, Social Security numbers, driver’s license/state ID numbers, and financial account details.
- PHI: Medicaid/Medicare numbers, medical treatment records, diagnoses, prescription information, health insurance details, and patient account numbers.
Aligned Orthopedic Partners will begin mailing notification letters to affected individuals on April 17, 2026, offering complimentary identity protection services through Cyberscout (a TransUnion company). Eligible individuals must enroll by July 16, 2026, and can verify eligibility via a dedicated call center at 1-833-877-6247 (operating Monday–Friday, 8 a.m.–8 p.m. ET).
The breach highlights ongoing risks to healthcare data, underscoring the need for robust email security measures in sensitive sectors.
Source: https://www.claimdepot.com/data-breach/aligned-orthopedic-partners-2026
Aligned Orthopedic Partners cybersecurity rating report: https://www.rankiteo.com/company/aligned-orthopedic-partners
"id": "ALI1776551139",
"linkid": "aligned-orthopedic-partners",
"type": "Breach",
"date": "11/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'name': 'Aligned Orthopedic Partners (ASC Ortho '
'Management Company LLC)',
'type': 'Healthcare Provider'}],
'attack_vector': 'Email Compromise',
'customer_advisories': 'Notification letters mailed on April 17, 2026, '
'offering complimentary identity protection services '
'through Cyberscout (a TransUnion company). Eligible '
'individuals must enroll by July 16, 2026, and can '
'verify eligibility via a dedicated call center at '
'1-833-877-6247 (operating Monday–Friday, 8 a.m.–8 '
'p.m. ET).',
'data_breach': {'file_types_exposed': ['Emails', 'Files'],
'personally_identifiable_information': ['Names',
'Dates of birth',
'Social Security '
'numbers',
'Driver’s '
'license/state ID '
'numbers',
'Financial account '
'details',
'Medicaid/Medicare '
'numbers',
'Medical treatment '
'records',
'Diagnoses',
'Prescription '
'information',
'Health insurance '
'details',
'Patient account '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['PII', 'PHI']},
'date_detected': '2025-12-08',
'date_publicly_disclosed': '2026-04-17',
'description': 'Aligned Orthopedic Partners (operating as ASC Ortho '
'Management Company LLC) has reported a data breach involving '
'unauthorized access to its email environment. Between '
'November 16 and December 16, 2025, an unknown threat actor '
'compromised the system, potentially accessing sensitive '
'emails and files. The breach may have exposed personally '
'identifiable information (PII) and protected health '
'information (PHI).',
'impact': {'data_compromised': 'PII and PHI',
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': 'Email environment'},
'investigation_status': 'Completed',
'lessons_learned': 'Highlights ongoing risks to healthcare data and '
'underscores the need for robust email security measures '
'in sensitive sectors.',
'references': [{'source': 'Cyber Incident Description'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA']},
'response': {'communication_strategy': 'Notification letters mailed to '
'affected individuals',
'incident_response_plan_activated': 'Yes',
'third_party_assistance': 'External cybersecurity experts'},
'threat_actor': 'Unknown',
'title': 'Aligned Orthopedic Partners Data Breach Affecting PII and PHI',
'type': 'Data Breach'}