Back to the register

Lancaster Orthopedic Group

ArchivedSubmitted 05/26/2023
State
PA
Covered entity type
Healthcare Provider
Individuals affected
1,784
Business associate present
No
Type of breach
Hacking/IT Incident
Location of breached information
Network Server
First seen by InfoSec Signals
9/23/2026
Last seen in OCR export
9/23/2026

OCR description

An unauthorized third party infiltrated the Covered Entity’s network and encrypted some of its data. It affected 1784 individuals and their protected health information which included names, addresses/zip, dates of birth, social security numbers, diagnosis/conditions, medications, and other treatment information. The covered entity employed extended detection and response, updated all server operating systems to current versions and patched them according to current industry standards; reloaded and updated all workstations to the latest version of their current supported operating system; employed email scanning and protection; and deployed encrypted email.

Change history

  • 9/23/2026Added to OCR's archive list

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal. Records are reproduced as published; entity names and figures are OCR's.