Collier Sports Medicine and Orthopaedic Center, a Naples, Florida orthopaedic and physical therapy practice, has been named by a ransomware group that claims it attacked the practice. The practice has not publicly confirmed an incident.
This page explains what has been reported, what has not, and what patients can do now.
Collier Sports Medicine and Orthopaedic Center’s Data Breach Investigation
Collier Sports Medicine and Orthopaedic Center is a medical practice in Naples, Florida. According to its own website, it provides orthopaedic surgery, sports medicine care, regenerative treatments and physical therapy, and it is connected to a surgery center in the same city. A practice with that mix of services serves surgical patients, athletes, active retirees and people recovering from injuries, so its records can reach many different kinds of patients over many years.
According to ransomware-tracking websites, a group calling itself Booba Project listed the practice as a victim on its dark web leak site. A post on one tracking site is dated November 10, 2026, and gives the same day as the estimated date of the attack. A second cybersecurity platform reported the same claim and said the group asserted it had taken about 20 gigabytes of data. A leak-site listing is a claim made by the criminals themselves. It is often meant to pressure a victim into paying, and it does not by itself prove that any patient files were taken.
At the time this page was written, we could not find a notice posted by the practice, a filing with a state attorney general, or a news report in which the practice confirms the incident. Until the practice or an official agency says more, the scope of the incident, the number of people affected, the kinds of information involved and the exact timeline remain unconfirmed. This page does not assume anything beyond what has been reported.
Ransomware groups often use what is called double extortion. They break into a network, copy files, lock the systems, and then threaten to publish the copied files unless a ransom is paid. Healthcare providers of every size are targeted, including independent specialty practices, because patient records are valuable and smaller practices often have limited security staff. An orthopaedic practice typically holds names, addresses, phone numbers, dates of birth, insurance details, treatment histories and imaging such as X-rays and scans. Some practices also keep Social Security numbers and payment card details for billing. We have no information that any of these items were taken from Collier Sports Medicine and Orthopaedic Center, and we do not suggest that they were. We list them only so patients understand the kinds of records a practice like this normally keeps.
Health privacy rules generally require a covered provider to notify affected patients without unreasonable delay and no later than 60 days after discovering a breach of unsecured health information. Florida law also sets its own notice deadlines and can require notice to the state when a certain number of residents are affected. In practice, notice letters often arrive weeks or months after an attack, because the practice first has to investigate with outside experts, work out which files were reached, and then identify the people in those files. If a letter comes, it is the most reliable way to learn whether your own information was involved, which items it covered, and what protection is being offered.
Patients should also expect scams to follow a claimed attack. Criminals who say they hold patient data sometimes email or call people directly, or imitate the practice, to ask for payment or personal details. Do not respond to a message that mentions this incident until you have checked it by contacting the practice through a phone number you already trust. If you were a patient, or an employee, keep your appointment records and any letters you receive, because they can help you show later when and how you learned of the exposure.
This page will be updated if the practice or a regulator publishes confirmed details.
When Did This Breach Occur?
The practice has not announced when any incident began or when it was discovered. A ransomware-tracking site records the group’s listing as dated November 10, 2026, and gives the same day as the estimated attack date.
Those dates describe when the claim appeared online, not necessarily when the practice was breached. If you receive a notice, look for the discovery date and the dates of unauthorized access in the letter itself.
What Information Was Breached?
The group reportedly claims to hold about 20 gigabytes of data. The listing does not say what that data contains, and the practice has not confirmed any data types. We found no official notice that lists the specific items involved.
For an orthopaedic practice, records can include contact details, dates of birth, insurance information, treatment history and imaging. Whether any of that was involved here is not known, so treat it as a question to check against your own letter, not as a fact.
What You Can Do
If you were a patient or employee of Collier Sports Medicine and Orthopaedic Center, or you think you may be affected, consider these steps.
- Keep any letter you receive, with the envelope and any enrollment code, so you have a record of what you were told.
- If a notice offers free credit monitoring or identity protection, enroll before the deadline in the letter.
- Request your free credit reports from Equifax, Experian, and TransUnion at annualcreditreport.com and look for accounts or inquiries you do not recognize.
- Consider placing a free fraud alert or a security freeze with each of the three credit bureaus.
- Review your insurance explanations of benefits and bank statements for charges or services you do not recognize.
- Be careful with calls, texts, and emails that mention the practice or this incident, and report suspected identity theft to the Federal Trade Commission at IdentityTheft.gov and to your state attorney general.
File a Data Breach Lawsuit Against Collier Sports Medicine and Orthopaedic Center
People whose personal and health information is exposed in a data breach may have legal options if the organization failed to use reasonable safeguards. Whether a claim exists depends on the facts, including what information was involved, how the incident happened, and how the practice responded.
If you received a notice connected to Collier Sports Medicine and Orthopaedic Center, or you believe your information was involved, you can speak with a lawyer about whether you may be able to join a class action lawsuit to seek compensation for the exposure of your information, the time you spent responding, and any losses you suffered.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
