Rebound Orthopedics & Neurosurgery

Disclosed Mar 7, 2024426,536 affectedConfirmed

The covered entity (CE), Rebound Orthopedics & Neurosurgery, reported that it experienced a cyberattack that affected the protected health information (PHI) of 426,536 individuals. The PHI involved included claims information and other financial information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards to better protect its PHI.

What is known

People affected	426,536 (as reported to HHS)
Disclosed	Mar 7, 2024
Discovered	Feb 3, 2024
Happened	Feb 1, 2024
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Rebound Orthopedics & Neurosurgery

Official noticeatg.wa.gov

Washington Attorney General breach notice: Rebound Orthopedics & Neurosurgery

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Rebound Orthopedics & Neurosurgery

Official noticeago.vermont.gov

Vermont Attorney General: 2025-02-04 Rebound Orthopedics & Neurosurgery Data Breach Notice to Consumers

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Rebound Orthopedics & Neurosurgery (Healthcare Provider, WA)

Notices filed

Residents of WAMar 7, 2024

Washington AG313,093 people

Residents of ORMar 21, 2024

Oregon DOJCount not stated

TotalApr 10, 2024

HHS archive426,536 people

Residents of CAFeb 4, 2025

California AGCount not stated

Residents of VTFeb 4, 2025

Vermont AGCount not stated

Other breaches at Rebound Orthopedics & Neurosurgery

Hacking breachHacking, data exposed not stated. Reported to the Washington AG.HealthcareUSOct 5, 2018

History of this record

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 426536by backfillSource

summary2026-09-25

empty to The covered entity (CE), Rebound Orthopedics & Neurosurgery, reported that it experienced a cyberattack that affected the protected health information (PHI) of 426,536 individuals. The PHI involved included claims information and other finaby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2025-02-04-rebound-orthopedics-neurosurgery-data-breach-notice-consumersby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

disclosed2026-09-25

2025-02-04 to 2024-03-07by backfillSource

discovered2026-09-25

empty to 2024-02-03by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Rebound Orthopedics & Neurosurgery