Bienville Orthopaedic Specialists
Disclosed Sep 1, 20233 years ago242,986 affectedConfirmed
The covered entity (CE), Bienville Orthopaedic Specialists, reported that it experienced a ransomware that compromised the protected health information (PHI) of 242,986 individuals. The PHI involved included names, addresses, telephone numbers, dates of birth, drivers’ license and Social Security numbers, and claims and financial information. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI. Staff were retrained on the requirement to protect and secure sensitive data. OCR provided technical assistance regarding the timeliness requirements of the HIPAA Breach Notification Rule.
What is known
| People affected | 242,986 (as reported by the organization) |
|---|---|
| Disclosed | Sep 1, 2023 |
| Happened | Feb 3, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2023-09-01 Bienville Orthopaedic Specialists Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: Bienville Orthopaedic Specialistsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Bienville Orthopaedic Specialists (Healthcare Provider, MS)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Sep 1, 2023 | |
| Indiana AGresidents of IN | Sep 1, 2023 | 64 |
| HHS archivetotal | Sep 5, 2023 | 242,986 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Bienville Orthopaedic Specialists, reported that it experienced a ransomware that compromised the protected health information (PHI) of 242,986 individuals. The PHI involved included names, addresses, telephone numb · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 242986 · backfill source
- 2026-09-25 · occurred: empty to 2023-02-03 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.