Pinnacle Orthopaedics & Sports Medicine Specialists LLC recently discovered a data security incident that may have affected patient information. On April 22, 2024, the organization identified suspicious activity within its network and promptly secured the environment, initiating an investigation with the help of cybersecurity experts. The investigation revealed that an unauthorized actor gained temporary access to a portion of the network, potentially acquiring certain files, though there was no evidence of access to the electronic medical records system.
Initially, fewer than ten patients were identified as impacted, and they were notified by U.S. mail around April 29, 2024. However, by June 7, 2024, Pinnacle determined that over 500 patients might have been affected. The organization is still conducting a detailed review to identify and notify all potentially impacted individuals.
Pinnacle has taken measures to secure its network and prevent future incidents, including implementing enhanced security protocols. The organization has also reported the breach to the Federal Bureau of Investigation and the Department of Health and Human Services.
To address concerns and provide information, Pinnacle has established a toll-free call center and is directing individuals to its website for guidance on protecting personal information.
Reference: