Were you recently affected by a data breach?

Advanced Center for Orthopedics & Sports Medicine Data Breach

Advanced Center for Orthopedics & Sports Medicine, a Kentucky orthopedic practice, reported a data breach to the Vermont Attorney General’s office involving Social Security numbers and health records.

Advanced Center for Orthopedics & Sports Medicine
Date of Breach: Reported to the Vermont Attorney General on August 26, 2026
CAU logo

Who was affected:

Clients of Advanced Center for Orthopedics & Sports Medicine

Impacted Data:

Social Security numbers, health records

Advanced Center for Orthopedics & Sports Medicine (legally known as Orthopedics & Sports Medicine Owensboro, P.S.C.) has notified the Vermont Attorney General’s office of a data breach. Medical practices are entrusted with some of the most sensitive personal information their patients have, and they have a responsibility to keep it secure and to notify affected individuals promptly when that trust is broken.

Advanced Center for Orthopedics & Sports Medicine’s Data Breach Investigation

According to a notice filed with the Vermont Attorney General’s office, Advanced Center for Orthopedics & Sports Medicine reported a security incident affecting at least 1 Vermont resident. The filing lists Social Security numbers and health records among the categories of information involved. Beyond the state filing, the practice has not publicly disclosed further details about how the incident occurred, when it was discovered, or its full scope across all affected individuals nationwide.

A single-resident count in a state filing like this one typically reflects only the number of people affected in that particular state; a healthcare provider’s overall breach can affect a much larger number of patients across multiple states, each of which may receive a separate notification filing. This is a normal feature of the notification process, not evidence that the incident is necessarily small in scope.

Healthcare providers are a frequent target for cyberattacks because medical records and Social Security numbers together are highly valuable on illicit markets, often more so than financial data alone, since medical identity theft can be harder for a victim to detect and unwind. Patients whose information includes both an SSN and health records face an elevated combined risk: criminals can attempt to open new credit lines using the SSN while separately exploiting the health information for insurance fraud or to obtain medical services fraudulently.

When Did This Breach Occur?

The exact date of the underlying security incident has not been publicly detailed. The notice was reported to the Vermont Attorney General’s office on August 26, 2026. This page will be updated if the practice releases additional information about when the breach occurred or was discovered.

What Information Was Breached?

Per the notice filed with the Vermont Attorney General’s office, the categories of information involved include Social Security numbers and health records.

What You Can Do

If you are a patient of Advanced Center for Orthopedics & Sports Medicine and believe you may have been affected, consider taking the following steps:

Review any notification you receive from the practice carefully and keep it for your records.

Monitor your explanation-of-benefits statements and insurance claims for services you did not receive.

Consider placing a fraud alert or credit freeze with the major credit bureaus given the Social Security number exposure.

Request a copy of your medical records periodically to check for unfamiliar entries that could indicate medical identity theft.

File a Data Breach Lawsuit Against Advanced Center for Orthopedics & Sports Medicine

If your personal or health information was compromised as a result of this breach, you may have legal options available to you. Healthcare providers that fail to adequately safeguard patient information can potentially be held accountable through a class action lawsuit.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Were you recently affected by a data breach?
Other Data Breaches
Date of Breach: Reported August 2026 (Dire Wolf ransomware claim)
Date of Breach: Reported to the Vermont Attorney General on August 25, 2026
Date of Breach: Reported to the Vermont Attorney General on August 26, 2026
Related News

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.