Lancaster Orthopedic Group

An unauthorized third party infiltrated the Covered Entity’s network and encrypted some of its data. It affected 1784 individuals and their protected health information which included names, addresses/zip, dates of birth, social security numbers, diagnosis/conditions, medications, and other treatment information. The covered entity employed extended detection and response, updated all server operating systems to current versions and patched them according to current industry standards; reloaded and updated all workstations to the latest version of their current supported operating system; employed email scanning and protection; and deployed encrypted email.