Center for Orthopaedic Specialists

The Center for Orthopaedic Specialists suffered a data breach triggered by a malicious software attack that encrypted patient data. The incident, reported by the California Office of the Attorney General, began on February 18, 2018, though the exact number of affected individuals and the specific types of compromised information (e.g., medical records, personal identifiers, or financial data) remain undisclosed. The breach involved ransomware, which likely disrupted operations and posed risks to patient privacy, confidentiality, and potentially the organization’s ability to deliver care. Given the nature of the attack—targeting a healthcare provider—it may have exposed sensitive health information, raising concerns about compliance with regulations like HIPAA and long-term reputational damage. The lack of clarity on the scope of the breach further complicates risk assessment, but the involvement of ransomware suggests a high-severity event with potential financial, operational, and legal repercussions.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-135457

TPRM report: https://www.rankiteo.com/company/oaa-orthopaedic-specialists

"id": "oaa830082025",
"linkid": "oaa-orthopaedic-specialists",
"type": "Ransomware",
"date": "2/2018",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'healthcare',
                        'location': 'California, USA',
                        'name': 'Center for Orthopaedic Specialists',
                        'type': 'healthcare provider'}],
 'data_breach': {'data_encryption': True},
 'description': 'The California Office of the Attorney General reported that '
                'the Center for Orthopaedic Specialists experienced a data '
                'breach due to a security event involving malicious software '
                'that encrypted patient data. The breach began on February 18, '
                '2018, but the total number of individuals affected and '
                'specific types of compromised information remain unknown.',
 'impact': {'data_compromised': True},
 'ransomware': {'data_encryption': True},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['California Office of '
                                                        'the Attorney '
                                                        'General']},
 'title': 'Data Breach at Center for Orthopaedic Specialists Due to Ransomware '
          'Attack',
 'type': 'data breach, ransomware'}