Orthopaedic Institute of Western Kentucky Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Orthopaedic Institute of Western Kentucky data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
Who is Orthopaedic Institute of Western Kentucky?
The Orthopaedic Institute of Western Kentucky was acquired by "Mercy Health. – Western Kentucky Orthopedics" and subsequently closed operations on Dec. 31, 2023. The facility, located at 200 Clint Hill Boulevard, featured on-site imaging, physical therapy and urgent care, making it a central hub for orthopedic needs in the region.
What Happened?
Orthopaedic Institute of Western Kentucky experienced a data breach due to cybersecurity incidents at its third-party vendor, Keystone Technologies. Keystone provided managed IT services for the institute.
Two separate incidents occurred on Keystone’s systems: the first between April 21, 2025, and April 26, 2025, and the second between July 19, 2025, and Aug. 1, 2025. During these incidents, unauthorized third parties accessed and obtained certain files containing patient information.
After a detailed investigation, it was confirmed that sensitive data was involved. The institute’s electronic medical record system and Mercy Health’s systems were not affected. The breach was disclosed to the Massachusetts Attorney General’s office on March 5, 2026.
Information Exposed:
- Medical records
- Social Security numbers
- Addresses
- Dates of birth
- Health insurance information
- Medical record numbers
- Names
- Treatment information
You May Be Entitled to Compensation
If your information was compromised in the Orthopaedic Institute of Western Kentucky data breach, you may be eligible for compensation. Lawyers are investigating claims on behalf of affected individuals.
Completing the below form can help determine your eligibility and connect you with legal support to protect your rights.
.png)