Every public data breach

44 disclosed this week · 26,355 on record

Central Texas Pediatric Orthopedics

Disclosed Apr 4, 2025140,121 affectedConfirmed

Official notice

The covered entity (CE), Central Texas Pediatric Orthopedics, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 140,000 individuals. The PHI involved included names, dates of birth, x-ray images, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice. In response to the breach, the CE implemented revised its information security policies and procedures and implemented new technical safeguards.

What is known

People affected140,121 (as reported by the organization)
DisclosedApr 4, 2025
HappenedJan 23, 2025
AttackHacking
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
attack2026-09-25
unknown to hackingby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
disclosed2026-09-25
2025-04-11 to 2025-04-04by backfillSource
summary2026-09-25
empty to The covered entity (CE), Central Texas Pediatric Orthopedics, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 140,000 individuals. The PHI involved included names, dates of birby backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 140121by backfillSource
occurred2026-09-25
empty to 2025-01-23by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Central Texas Pediatric Orthopedics