Central Indiana Orthopedics
Disclosed Mar 7, 20224 years ago83,705 affectedConfirmed
The covered entity (CE), Central Indiana Orthopedics, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 83,705 individuals. The impacted PHI included names, addresses, social security numbers, diagnoses, lab results, and medications. The CE notified HHS, affected individuals, and the media of the breach. The CE implemented additional administrative and technical security measures to protect PHI. OCR provided the CE with technical assistance.
What is known
| People affected | 83,705 (as reported by the organization) |
|---|---|
| Disclosed | Mar 7, 2022 |
| Happened | Oct 15, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2022 data breach report: Central Indiana Orthopedicsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Central Indiana Orthopedics (Healthcare Provider, IN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Mar 7, 2022 | 81,313 |
| HHS archivetotal | Mar 7, 2022 | 83,705 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Central Indiana Orthopedics, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 83,705 individuals. The impacted PHI included names, addresses, social security n · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.