Bone & Joint Surgery Data Breach Affects 5,461 Patients

The Center for Bone & Joint Surgery of the Palm Beaches, an orthopedic and spine care practice serving patients in South Florida, disclosed a data breach that affected 5,461 individuals in the United States.

The breach was disclosed to the U.S. Department of Health and Human Services on Sept. 25, 2026.

No timeline has been publicly provided regarding when the breach first occurred, when it was discovered by the practice or when affected individuals began to be notified. As such, the full scope and nature of the incident remain unclear.

The specific types of protected health information or personally identifiable information that were exposed in the breach have not been identified in available filings but may have included names, contact information, medical records, health insurance information, treatment details and more.

The Center for Bone & Joint Surgery of the Palm Beaches' response to the breach

Individuals who believe they may have been affected by this breach should watch for a notification letter from the practice in the mail. Breach notification letters typically explain what happened, what types of data were involved and what steps affected individuals can take to protect themselves.

Individuals with questions or concerns about the incident may also wish to contact The Center for Bone & Joint Surgery of the Palm Beaches directly to learn more about the breach and the measures being taken to protect patient information.