Back to the register

Lancaster Orthopedic Group

ArchivedSubmitted 05/26/2023

Updated 14 hours ago ()

State
PA
Covered entity type
Healthcare Provider
Individuals affected
1,784
Business associate present
No
Type of breach
Hacking/IT Incident
Location of breached information
Network Server
First seen by InfoSec Signals
Sep 23, 2026
Last seen in OCR export
Oct 25, 2026

OCR description

An unauthorized third party infiltrated the Covered Entity’s network and encrypted some of its data. It affected 1784 individuals and their protected health information which included names, addresses/zip, dates of birth, social security numbers, diagnosis/conditions, medications, and other treatment information. The covered entity employed extended detection and response, updated all server operating systems to current versions and patched them according to current industry standards; reloaded and updated all workstations to the latest version of their current supported operating system; employed email scanning and protection; and deployed encrypted email.

Change history

  • Sep 23, 2026Added to OCR's archive list

Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source

Records are reproduced as published; entity names and figures are OCR's.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.