Florida Orthopaedic Institute
Disclosed Jun 22, 20206 years ago651,527 affectedConfirmed
The covered entity (CE), Florida Orthopaedic Institute reported that a ransomware attack affected the protected health information (PHI) of 651,527 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license numbers, claims information, diagnoses, medical conditions, laboratory results, and medications. The CE notified HHS, the affected individuals, the media, and provided substitute notice on its website. Following the breach, the CE implemented additional technical safeguards, conducted employee training, and offered identity restoration services to individuals.
What is known
| People affected | 651,527 (as reported to HHS) |
|---|---|
| Disclosed | Jun 22, 2020 |
| Happened | Apr 6, 2020 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Florida Orthopaedic Instituteoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2020 data breach report: Florida Orthopaedic Institutein.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: Florida Orthopaedic Institutemaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Florida Orthopaedic Institute (Healthcare Provider, FL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jun 22, 2020 | |
| Indiana AGresidents of IN | Jun 22, 2020 | 777 |
| HHS archivetotal | Jul 1, 2020 | 651,527 |
| Maine AGresidents of ME | Jul 21, 2020 | 276 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names","ssn"] to ["names","ssn","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 651000 to 651527 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Florida Orthopaedic Institute reported that a ransomware attack affected the protected health information (PHI) of 651,527 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license nu · backfill source
- 2026-09-25 · data_types: [] to ["names","ssn"] · backfill source
- 2026-09-25 · records: 645000 to 651000 · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 645000 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.