Northeast Spine and Sports Medicine Data Breach Investigation
Strauss Borrelli PLLC, a leading data breach law firm, is investigating Northeast Spine and Sports Medicine, LLC, regarding its recent data breach. The Northeast Spine and Sports Medicine data breach may have involved sensitive personal identifiable information and protected health information belonging to approximately 6,500 individuals.
ABOUT NORTHEAST SPINE AND SPORTS MEDICINE, LLC:
Northeast Spine and Sports Medicine is a multi-specialty medical group based in New Jersey. Founded in 2001, Northeast Spine and Sports Medicine specializes in orthopedic surgery, neurosurgery, pain management, sports medicine, chiropractic, physical & occupational therapy, acupuncture and massage.2 Accordingly, Northeast Spine and Sports Medicine treats a variety of conditions, including diabetic neuropathy and pain in the hip, ankle, knee, back, shoulder, elbow, wrist, and hand.3 Headquartered in Point Pleasant, New Jersey, Northeast Spine and Sports Medicine has 10 additional locations and employs over 75 individuals.
WHAT HAPPENED?
Recently, Northeast Spine and Sports Medicine reported to the Attorney General of Maine that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed. According to the breach notice, on or around January 8, 2024, Northeast Spine and Sports Medicine discovered that its network had been accessed by an unauthorized third party. As a result, Northeast Spine and Sports Medicine launched an investigation to determine the nature of the incident.
Through its investigation, Northeast Spine and Sports Medicine discovered that sensitive personal information in its systems may have been compromised by an unauthorized third party between late December 2023 and early January 2024. As a result, Northeast Spine and Sports Medicine began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Address
- Date of birth
- Sex/gender
- Phone numbers
- Medical information
- Medical billing and financial data
- Insurance and payment information
- Medical record numbers
- Health plan beneficiary numbers
- Account numbers
On October 17, 2024, Northeast Spine and Sports Medicine began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Maine residents, Northeast Spine and Sports Medicine is providing affected individuals with a list of the specific types of sensitive information impacted and 24 months of complimentary credit monitoring services. A link to the form breach notification letters that Northeast Spine and Sports Medicine filed with the Attorney General of Maine is below.
If you received a breach notification letter from Northeast Spine and Sports Medicine, LLC:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
