Breaches and incidents
Comprehensive Orthopaedics & Musculoskeletal Care (Connecticut): 21,897 affected, Crypto24 leaked data
HIPAA Journal reports the practice told HHS OCR that PHI of 21,897 people was involved after suspicious activity on 12 Feb 2026.
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- HIPAA Journal reports the practice told HHS OCR that PHI of 21,897 people was involved after suspicious activity on 12 Feb 2026; data included SSNs, financial account and payment card numbers, government IDs, medical and insurance information.
- Root cause: not disclosed.
- HIPAA Journal says a ransomware group called Crypto24 claimed to have taken data and published it; the practice did not describe it as ransomware.
- The investigation and review finished on 17 Jun 2026; a substitute notice was posted.