Excelsior Orthopaedics reports hacking incident affecting nearly 300,000 patients
Excelsior Orthopaedics, LLC, a healthcare provider in New York, reported a hacking/IT incident to HHS OCR on August 21, 2024. The filing indicates that 292,913 individuals were affected. The breach involved unauthorized access to a network server. While this submission date marks when the report was filed, it does not necessarily reflect when the incident occurred or was discovered. Healthcare administrators should review their own cybersecurity protocols, particularly regarding server security, to ensure patient data remains protected against similar threats.
Sources differ:
- The HHS OCR filing cited here lists 292,913 individuals affected as of the August 21, 2024 submission; later reporting (e.g., HIPAA Journal, SecurityWeek) states the breach was updated to affect approximately 357,000 people, and one account references a filing of 394,752 individuals.