Nebraska Orthopaedic Center Reports Data Breach Linked to Third-Party Vendor Incident
Nebraska Orthopaedic Center, a physician-owned network of healthcare clinics, has disclosed a data breach stemming from a December 2025 security incident at a third-party data migration and archiving vendor. The breach potentially exposed sensitive patient information, including names, dates of birth, medical records, driver’s license numbers, financial account details, health insurance data, taxpayer identification numbers, government IDs, and Social Security numbers.
The exact number of affected individuals has not been publicly released. Legal representatives are investigating the incident to determine whether a class action lawsuit can be filed on behalf of those impacted, citing potential harm such as loss of privacy, out-of-pocket costs, and time spent addressing the breach.
The breach highlights ongoing risks associated with third-party vendors in the healthcare sector, where sensitive data is frequently shared for processing and storage. Further details about the incident and its scope remain under review.
Source: https://www.classaction.org/data-breach-lawsuits/nebraska-orthopaedic-center-august-2026
Third-party data migration and archiving vendor TPRM report: https://www.rankiteo.com/company/nsc-legacy-data-solutions
Nebraska Orthopaedic Center TPRM report: https://www.rankiteo.com/company/nebraska-orthopaedic-center
"id": "nebnsc1786611767",
"linkid": "nebraska-orthopaedic-center, nsc-legacy-data-solutions",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Nebraska, USA',
'name': 'Nebraska Orthopaedic Center',
'type': 'Healthcare Clinic Network'}],
'attack_vector': 'Third-Party Vendor Compromise',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Dates of birth',
'Medical records',
'Driver’s license numbers',
'Financial account details',
'Health insurance data',
'Taxpayer identification numbers',
'Government IDs',
'Social Security numbers']},
'date_detected': '2025-12',
'description': 'Nebraska Orthopaedic Center, a physician-owned network of '
'healthcare clinics, has disclosed a data breach stemming from '
'a December 2025 security incident at a third-party data '
'migration and archiving vendor. The breach potentially '
'exposed sensitive patient information, including names, dates '
'of birth, medical records, driver’s license numbers, '
'financial account details, health insurance data, taxpayer '
'identification numbers, government IDs, and Social Security '
'numbers.',
'impact': {'brand_reputation_impact': 'Potential harm such as loss of privacy',
'data_compromised': 'Sensitive patient information, including '
'names, dates of birth, medical records, '
'driver’s license numbers, financial account '
'details, health insurance data, taxpayer '
'identification numbers, government IDs, and '
'Social Security numbers',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuit',
'payment_information_risk': 'High'},
'investigation_status': 'Under review',
'lessons_learned': 'Highlights ongoing risks associated with third-party '
'vendors in the healthcare sector, where sensitive data is '
'frequently shared for processing and storage.',
'references': [{'source': 'Incident Disclosure'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit'},
'title': 'Nebraska Orthopaedic Center Data Breach Linked to Third-Party '
'Vendor Incident',
'type': 'Data Breach'}