Orthopaedic Specialists of Massachusetts Data Breach Exposes Sensitive Patient and Employee Information
Orthopaedic Specialists of Massachusetts (OSM), a healthcare provider with locations in Norwood and Milton, Massachusetts, and partnerships with multiple state hospitals, disclosed a data breach involving unauthorized access to sensitive patient and employee information. The breach was first detected on January 15, 2026, after suspicious network activity was identified. An investigation revealed that an unauthorized actor may have copied data between January 12 and January 15, 2026.
The compromised information varies by individual but may include names, addresses, phone numbers, dates of birth, Social Security numbers, patient identification numbers, medical account details, medical records, and health insurance information. OSM has begun notifying affected individuals by mail.
The incident has prompted legal scrutiny, with attorneys exploring potential class action lawsuits on behalf of those impacted. The breach underscores ongoing risks to healthcare data security, particularly for organizations handling highly sensitive personal and medical records.
Source: https://www.classaction.org/data-breach-lawsuits/orthopaedic-specialists-of-massachusetts-june-2026
Orthopaedic Specialists of Massachusetts cybersecurity rating report: https://www.rankiteo.com/company/orthopaedic-specialists-of-massachusetts
"id": "ORT1781303418",
"linkid": "orthopaedic-specialists-of-massachusetts",
"type": "Breach",
"date": "1/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Patients and employees',
'industry': 'Healthcare',
'location': 'Norwood, Milton, Massachusetts, USA',
'name': 'Orthopaedic Specialists of Massachusetts '
'(OSM)',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Notifying affected individuals by mail',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Addresses',
'Phone numbers',
'Dates of birth',
'Social Security numbers',
'Patient identification numbers',
'Medical account details',
'Medical records',
'Health insurance information']},
'date_detected': '2026-01-15',
'description': 'Orthopaedic Specialists of Massachusetts (OSM), a healthcare '
'provider with locations in Norwood and Milton, Massachusetts, '
'and partnerships with multiple state hospitals, disclosed a '
'data breach involving unauthorized access to sensitive '
'patient and employee information. The breach was first '
'detected on January 15, 2026, after suspicious network '
'activity was identified. An investigation revealed that an '
'unauthorized actor may have copied data between January 12 '
'and January 15, 2026. The compromised information varies by '
'individual but may include names, addresses, phone numbers, '
'dates of birth, Social Security numbers, patient '
'identification numbers, medical account details, medical '
'records, and health insurance information. OSM has begun '
'notifying affected individuals by mail.',
'impact': {'data_compromised': 'Sensitive patient and employee information',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuits'},
'investigation_status': 'Ongoing',
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuits'},
'response': {'communication_strategy': 'Notifying affected individuals by '
'mail'},
'title': 'Orthopaedic Specialists of Massachusetts Data Breach Exposes '
'Sensitive Patient and Employee Information',
'type': 'Data Breach'}