Strauss Borrelli PLLC, a leading data breach law firm, is investigating Excelsior Orthopaedics, LLP (“Excelsior”) regarding its recent data breach. The Excelsior data breach may have involved sensitive personal information and protected health information belonging to approximately 357,000 individuals.
ABOUT EXCELSIOR ORTHOPAEDICS, LLP:
Excelsior is a comprehensive musculoskeletal center based in New York. Founded in 2002, Excelsior offers a broad range of medical and clinical expertise in the areas of general orthopedic evaluation and treatment, physical and occupational therapy, primary care for sports injuries, hand care, foot and ankle care, shoulder, arm, and elbow care, hip, leg, and knee care, and spine care.3 Today, Excelsior provides in-house physical therapy, imaging, crutches and canes, sports performance, nutrition and outpatient surgery.4 Headquartered in Amherst, New York, Excelsior has nine additional locations across New York and employs over 200 individuals.
WHAT HAPPENED?
Recently, Excelsior announced that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed. According to the breach notice, on June 23, 2024, Excelsior detected unusual activity on its network and discovered that it was the victim of a data security incident.1 As a result, Excelsior launched an investigation to determine the nature of the incident.
Through its investigation, Excelsior confirmed that sensitive personal information in its systems belonging to patients and employees of Excelsior and its related entities, including the Buffalo Surgery Center and Northtowns Orthopaedics, may have been compromised by an unauthorized third party on June 18, 2024.2 As a result, Excelsior began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Demographic information
- Driver’s license number
- Medical information
- Health insurance information
- Financial information
As a result of the data breach, Excelsior posted a notice of the incident on its website. Additionally, in August 2024, Excelsior mailed an initial wave of individual breach notification letters to affected individuals. On December 31, 2024, Excelsior mailed a second wave of notices to affected patients and employees and will continue to notify individuals as they are identified. Based on the website breach notice, Excelsior is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification that Excelsior posted to its website is below.
If you received a breach notification letter from Excelsior Orthopaedics, LLP:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
