Excelsior Orthopaedics reports hacking incident affecting nearly 300,000 patients
Excelsior Orthopaedics, LLC, a healthcare provider in New York, reported a hacking/IT incident to HHS OCR on August 21, 2024. The filing indicates that 292,913 individuals were affected. The breach involved unauthorized access to a network server. While this submission date marks when the report was filed, it does not necessarily reflect when the incident occurred or was discovered. Healthcare administrators should review their own cybersecurity protocols, particularly regarding server security, to ensure patient data remains protected against similar threats.
Sources differ:
- The HHS OCR breach portal lists 292,913 individuals. Later press reports, citing a Maine Attorney General filing and a later revised filing, put the number at about 357,000 and then about 394,752.
Primary source: HHS OCR Breach Portal — Excelsior Orthopaedics, LLC (NY) · reported 08/21/2024 · 292,913 individuals · Checked against the record 2026-10-21