Central Texas Pediatric Orthopedics
Disclosed Apr 4, 20251 year ago140,121 affectedConfirmed
The covered entity (CE), Central Texas Pediatric Orthopedics, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 140,000 individuals. The PHI involved included names, dates of birth, x-ray images, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice. In response to the breach, the CE implemented revised its information security policies and procedures and implemented new technical safeguards.
What is known
| People affected | 140,121 (as reported by the organization) |
|---|---|
| Disclosed | Apr 4, 2025 |
| Happened | Jan 23, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2025-04-11 Central Texas Pediatric Orthopedics Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Central Texas Pediatric Orthopedicsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Central Texas Pediatric Orthopedics (Healthcare Provider, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Apr 4, 2025 | 140,000 |
| Vermont AGresidents of VT | Apr 11, 2025 | |
| Indiana AGresidents of IN | Apr 11, 2025 | 32 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2025-04-11 to 2025-04-04 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Central Texas Pediatric Orthopedics, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 140,000 individuals. The PHI involved included names, dates of bir · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 140121 · backfill source
- 2026-09-25 · occurred: empty to 2025-01-23 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.