OrthoCare Express Logo | CT Orthopedic Urgent Care
banner lifestyle01

Notice of Data Security Incident

The privacy and security of the personal information entrusted to us is of the upmost importance to OrthoConnecticut. We are writing to provide you with information regarding a recent cybersecurity incident. As such, we wanted to provide you with information about the incident, explain the services we are making available to you, and let you know that we continue to take significant measures to protect your personal information.

OrthoConnecticut recently became aware of unauthorized access to our network environment. As soon as we became aware of the issue, we launched an investigation, contained and secured the network, eradicated the threat, and alerted law enforcement. As part of the investigation, we have been working very closely with third-party cybersecurity professionals experienced in handling these types of incidents. The investigation aimed to determine the nature and scope of the incident and whether any sensitive data, including personal and/or health information, was accessed and/or acquired by the unauthorized party.

After a thorough and detailed forensic investigation, we determined the unauthorized actor accessed our network between November 24, 2023 and November 28, 2023 and, as a result, may have accessed and removed certain files from our network environment. Upon learning this, we promptly conducted an extensive and comprehensive review of the impacted files and, on March 27, 2024, we discovered that certain files containing personal information may have been accessed and/or acquired by the unauthorized party.

The impacted data contained the personal information of certain individuals, including full names in combination with one or more of the following: Social Security number, date of birth, and medical information. Medical information includes, but is not limited to, patient account number, doctor’s name, lab test details, and patient history. Please note that impacted information varies by individual.

We have no evidence that any information has been misused as a direct result of this incident. Nevertheless, out of an abundance of caution, we are notifying affected individuals of the scope of the incident. This notice provides other precautionary measures individuals can take to protect their personal information, including placing a Fraud Alert and Security Freeze on you credit files and obtaining a free credit report. Additionally, impacted individuals should always remain vigilant in reviewing their credit reports on a regular basis and report any irregular activity immediately.

Please accept our apologies that this incident occurred. OrthoConnecticut remains fully committed to maintaining the privacy of personal information in its possession and has taken many precautions to safeguard it, including continually evaluating and modifying its practices and internal controls.

Individuals who think they may have been impacted and did not receive a notification letter, or have any further questions regarding this incident can call our dedicated and confidential toll-free response line that we have to set up to respond to questions at 1-844-825-0293. This response line is staffed with professionals familiar with this incident and knowledgeable on what can be done to protect personal information. The response line is available Monday through Friday, 9:00 a.m. to 9:00 p.m. Eastern Time, excluding holidays.