Carolina Arthritis Associates Data Breach Details
Carolina Arthritis discovered a computer network disruption on September 27, 2024. Upon detecting the network disruption, Carolina Arthritis immediately secured its systems and engaged cybersecurity experts to investigate the incident. The review found that an external hacking attack may have led to the unauthorized acquisition of files on or around September 27, 2024.
A thorough programmatic and manual review of affected data confirmed that the breach involved sensitive personal and medical information for certain individuals.
On February 27, 2025, Carolina Arthritis began notifying affected individuals by USPS First Class Mail, providing guidance on protecting their information. For individuals whose Social Security number or driver’s license number was potentially exposed, the company is offering 12 months of complimentary identity protection services, including:
- Credit monitoring
- Identity remediation services
- Access to a call center for 90 days to assist with questions
These services are provided by CyberScout, a TransUnion company specializing in fraud prevention and identity protection.
What Information Was Compromised?
The review determined that certain individuals’ personal information was present on the affected system, including:
- Date of birth
- Medical treatment or procedure details
- Medical record number
- Medical provider name
- Social Security number