Data Breach Summary
Excelsior Orthopaedics, LLP (“Excelsior”), a healthcare provider with 10 locations across western New York, has reported a major cybersecurity incident impacting 394,752 individuals, including patients and employees of its affiliated entities Buffalo Surgery Center and Northtowns Orthopedics. The breach, which stemmed from a hacking attack, exposed highly sensitive personal and medical information.
Excelsior reported that it detected unusual activity on its network on June 23, 2024, and determined that an unauthorized party had gained access to its IT systems. The intrusion was classified as an external system breach (hacking). The company engaged a third-party cybersecurity firm to contain the attack, conduct forensic analysis, and assess the extent of the data compromise.
In response to the breach, Excelsior stated that it has:
Contained the intrusion and secured its network
Engaged cybersecurity and forensic experts to investigate
Notified law enforcement and relevant regulatory authorities
Offered 12 months of free credit monitoring and identity theft protection through CyberScout, a TransUnion company
Impacted individuals are being contacted directly and provided with instructions to enroll in these protective services.
Excelsior confirmed that the breach exposed highly sensitive information of both current and former patients, as well as employees. The compromised data varied by individual but may have included:
Full names
Dates of birth
Driver’s license or state identification numbers
Social Security numbers
Medical records and health information
Health insurance details
This type of data is particularly valuable to cybercriminals and can be exploited for medical identity theft, tax fraud, and other forms of financial crime.
The investigation confirmed that this was a large-scale breach, impacting 394,752 individuals in total. While only 24 of those affected were Maine residents, the sensitive nature of the compromised data including Social Security numbers, medical details, and insurance information—creates a significant risk of identity theft and financial fraud for all impacted individuals.
If your personal information has been breached, it’s important to take immediate and proactive steps to minimize the potential impact and protect yourself from identity theft or fraud. Here are some general actions that you should consider taking:
Monitor Credit Reports: Check your credit reports regularly for suspicious activity.
Place a Fraud Alert or Credit Freeze: Set up a fraud alert or freeze your credit to prevent unauthorized access.
Monitor Financial Accounts: Review bank and credit card statements for unfamiliar transactions.
Watch for Phishing Scams: Be cautious of unsolicited requests for personal information.
Change Passwords: Update passwords for online accounts and use strong, unique ones.
Enable Two-Factor Authentication: Add an extra layer of security to online accounts.
Review Health and Insurance Info: Check for fraudulent charges if health data was exposed.
If you have received a data breach notification from Excelsior Orthopaedics, you may be eligible for compensation through a class action lawsuit. Data breaches can cause substantial personal and financial harm, and holding the responsible parties accountable is crucial to ensuring justice for those affected.
If you’re unsure whether you have a case, we highly recommend contacting Class Action U for a free consultation. We partner with top-notch legal representation to navigate this complex process. Joining a class action can amplify your voice and help ensure that data breaches like this are taken seriously by corporate entities.
If your data was compromised, you could be entitled to compensation for:
Loss of privacy
Time spent resolving the breach
Out-of-pocket expenses
Emotional distress
By pursuing a class action lawsuit, you not only have the opportunity to recover damages but also help hold Excelsior Orthopaedics, accountable, potentially prompting them to strengthen their security measures. Reach out to Class Action U today to find out if you qualify for a data breach class action and learn more about the compensation you may be entitled to.
©2024 ClassActionU
