Advantage Orthopedic and Sports Medicine Data Breach Investigation

Recently, Advantage Orthopedic reported to the Attorney General of Oregon that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its systems may have been accessed and acquired. According to the breach notice, on February 11, 2024, Advantage Orthopedic discovered that an unauthorized actor had gained access to some of its systems and data. As a result, Advantage Orthopedic launched an investigation to determine the nature of the incident.

Through its investigation, Advantage Orthopedic learned that sensitive personal information may have been viewed and taken by an unauthorized third party on January 29, 2024. As a result, Advantage Orthopedic began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name
• Social Security number
• Date of birth
• Financial account information
• Medical information (e.g., clinical or treatment information, medical provider name, medical record number, patient account number, medical procedure information, prescription information)
• Health insurance information (e.g., billing information)

On February 21, 2024, Advantage Orthopedic began notifying impacted individuals. Based on the breach notice posted on its website, Advantage Orthopedic is providing affected individuals with a list of the specific type of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letter that Advantage Orthopedic filed with the Attorney General of Oregon is below.