Orthopedic Associates of Dutchess County

On or around March 1, 2021, Orthopedic Associates of Dutchess County (OADC) suffered a data breach due to unauthorized access to their systems. The incident exposed sensitive personal and financial information of 331,376 individuals, including 91 Maine residents. Compromised data included names, Social Security numbers, and bank account details, heightening risks of identity theft and financial fraud. Affected individuals were notified via written correspondence on May 4, 2021, nearly two months after the breach. As a remedial measure, OADC offered one year of identity theft protection services through Experian. The breach underscored vulnerabilities in the organization’s cybersecurity defenses, particularly in safeguarding highly sensitive personally identifiable information (PII) and financial records. The scale of the breach and the nature of the exposed data suggest severe reputational and operational consequences for OADC, alongside potential legal and regulatory scrutiny.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a04faed6-a1b9-4b57-a8b2-223dc871ac88.shtml

TPRM report: https://www.rankiteo.com/company/orthopedic-associates-of-dutchess-county

"id": "ort555083025",
"linkid": "orthopedic-associates-of-dutchess-county",
"type": "Breach",
"date": "3/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 331376,
                        'industry': 'Healthcare',
                        'location': 'Dutchess County, New York, USA',
                        'name': 'Orthopedic Associates of Dutchess County '
                                '(OADC)',
                        'type': 'Healthcare Provider'}],
 'customer_advisories': 'Written notice sent to affected individuals on May 4, '
                        '2021; identity theft protection services offered '
                        'through Experian for one year',
 'data_breach': {'number_of_records_exposed': 331376,
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Data']},
 'date_detected': '2021-03-01',
 'description': 'The Maine Office of the Attorney General reported that '
                'Orthopedic Associates of Dutchess County (OADC) experienced a '
                'data breach involving unauthorized access to their systems on '
                'or about March 1, 2021. The breach potentially affected '
                '331,376 individuals, including 91 Maine residents, and '
                'involved the compromise of names, Social Security numbers, '
                'and bank account information. Written notice was sent to '
                'affected individuals on May 4, 2021, and identity theft '
                'protection services were offered through Experian for one '
                'year.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'bank account information'],
            'identity_theft_risk': 'High (PII and financial data exposed)',
            'payment_information_risk': 'High (bank account information '
                                        'exposed)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Written notice sent to affected '
                                        'individuals on May 4, 2021',
              'third_party_assistance': 'Experian (identity theft protection '
                                        'services)'},
 'title': 'Data Breach at Orthopedic Associates of Dutchess County (OADC)',
 'type': 'Data Breach'}