Posted On March 27, 2025 Consumer Privacy & Data Breaches
March 27 – The Concord Orthopaedics data breach lawyers at Console & Associates, P.C are investigating the data breach that was reported after the company was targeted in a recent cyber security attack. The Concord Orthopaedics data breach resulted in the exposure of patients’ sensitive personal and medical information being compromised. This includes names, Social Security numbers, dates of birth, driver’s license numbers, state identification numbers, and health insurance information.
According to the New Hampshire Attorney General’s Office report, Concord Orthopaedics disclosed a data breach after discovering unauthorized access to a third-party software vendor’s program used by COPA. The breach was not a direct intrusion into Concord Orthopaedics’ systems but rather involved a third-party software vulnerability.
The security incident first came to light on November 21, 2024, when Concord Orthopaedics was informed by a third-party software vendor about possible unauthorized access to their software product used by COPA. In response to this notification, Concord Orthopaedics took immediate action by:
The investigation revealed that while an unauthorized party had gained access to the third-party software, there was no evidence that Concord Orthopaedics’ internal systems were directly compromised. However, the unauthorized access to the vendor’s software still allowed potential exposure of confidential patient information.
After identifying the security incident, COPA conducted a thorough review of the affected files to determine which specific information was exposed and which patients were impacted. This review process took several months to complete before notifications could be sent.
On March 25, 2025, Concord Orthopaedics sent out data breach letters to those individuals whose information was affected by the breach. These notification letters should provide specific details about what personal information was exposed for each individual recipient.
Concord Orthopaedics is a medical practice based in New Hampshire specializing in orthopedic care services. The organization operates multiple locations throughout the region and provides both surgical and non-surgical treatments for conditions affecting bones, joints, muscles, and related anatomical structures.
Founded in Concord, New Hampshire, Concord Orthopaedics offers specialized services including sports medicine, spine care, hand and wrist surgery, joint replacement procedures, and physical therapy. They employ approximately 237 staff members across their facilities and generate estimated annual revenue of $15 million.
Our data breach lawyers are eager to speak to victims of the Concord Orthopaedics data breach to determine what damages they sustained and what compensation may be available to them. If you recently received a NOTICE OF DATA BREACH from Concord Orthopaedics and would like a free consultation, contact the Console & Associates, P.C. law firm at (866) 778-5500 to discuss your legal options, or submit a confidential contact form.
