Concord Orthopaedic Notifies Individuals of Security Incident

CONCORD, N.H., March 25, 2025 /PRNewswire/ -- Concord Orthopaedic ("COPA") is an orthopedic clinic located in Concord, New Hampshire that specializes in orthopaedic and rheumatology care.

On November 21, 2024, COPA was notified by a third-party vendor that the software COPA uses to check-in patients and prospective patients for appointments was potentially accessed by an unauthorized actor. COPA immediately took steps to ensure the security of its environment, shut down all access to and reset passwords for the third-party software, and engaged external cybersecurity specialists to assist with investigating the nature and scope of this matter.

Through this investigation, COPA determined that an unauthorized party accessed this third-party software and potentially viewed and/or acquired patient registration and appointment intake information stored there. The investigation found no evidence of compromise to COPA's internal environment or its electronic health records system, which is hosted in a separate application.

The information that may be involved varies for each individual, and the types of information impacted depends upon what patients and prospective patients provided during registration and appointment intake.  However, the types of information that could have been collected and stored on the third-party software include name, date of birth, Social Security number, appointment information (including appointment type, treating physician name, and date and location of appointment), health insurance information (including health plan beneficiary number, health plan number, and insurance eligibility information), and driver's license or state identification number.

Individuals who have questions related to this incident can call our dedicated call center at 1-855-659-0098, between 9am - 9pm Eastern Time, Monday through Friday. Alternatively, individuals may also visit https://www.concordortho.com/storage/components/clearwave_databreach_websitenotice_1.pdf for additional information about this incident.

SOURCE Concord Orthopaedic