On April 23, 2025, Orthopaedic Specialists of Connecticut (OSC) disclosed a significant data breach that affected 22,541 individuals in the United States, according to the U.S. Department of Health and Human Services.
The breach was the result of a ransomware attack carried out by the group known as INC RANSOM. The attackers gained unauthorized access to OSC’s network environment on March 2, 2025, and may have acquired sensitive data during this incident.
OSC discovered the breach after detecting unusual activity and immediately engaged a specialized third-party forensic incident response firm to secure their systems and investigate the extent of the unauthorized activity. The forensic investigation confirmed that certain data had likely been acquired by the attackers.
The compromised information includes a combination of personally identifiable information (PII) and protected health information (PHI) including first name, last name, date of birth, Social Security number, health insurance ID number, and medical information.
The breach was also posted on a dark web network, with INC RANSOM claiming responsibility and asserting they had obtained the organization’s data.
OSC is providing written notice to all impacted individuals, as well as offering complimentary credit monitoring and identity theft protection services for twelve months at no cost. Individuals who may have been affected are strongly encouraged to enroll in these services and to follow the recommendations provided in the notification letter to protect their personal information. For further assistance or questions, OSC has set up a dedicated call center at 1-844-534-6032, available Monday through Friday from 8:00 a.m. to 8:00 p.m. ET, excluding holidays.
If you are concerned that your information may have been compromised, it is advisable to monitor your financial accounts and credit reports closely, take advantage of the free credit monitoring services, and remain vigilant for any suspicious activity. For more information and to view the official notice, you can visit the OSC data security notice page.
You can learn more about the organization at the Orthopaedic Specialists of Connecticut website.