.png)
Concord Orthopaedics Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Concord Orthopaedics data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Concord Orthopaedics
Concord Orthopaedics is a medical practice specializing in orthopaedic surgery and rheumatology. Founded in 1974, the practice operates multiple offices throughout New Hampshire, including locations in Concord, Derry, New London, Windham, Raymond, Laconia, and Plymouth. Concord Orthopaedics employs approximately 89 people, according to LinkedIn.
The practice offers a wide range of medical specialties, including sports medicine, spine surgery and care, pediatric orthopaedics, total joint surgery, orthopaedic trauma, hand surgery, foot and ankle care, and rheumatology. More information about the practice can be found on their official website at https://concordortho.com.
What was the November 2024 Ransomware Attack?
On November 21, 2024, Concord Orthopaedics discovered a data breach involving a third-party vendor responsible for patient registration and appointment intake software. The breach was caused by the Everest ransomware group, a cybercriminal organization known for targeting sensitive data. Everest ransomware claims to have obtained medical records and personal data of all patients from 2018 onward and has threatened to publish the information on the dark web.
Information Exposed (according to the official disclosures):
- Name
- Date of birth
- Social Security number
- Appointment information (appointment type, treating physician, date, and location)
- Health insurance information (health plan beneficiary number, health plan number, insurance eligibility details)
- Driver’s license or state identification number (including images of licenses or IDs for some individuals)
The breach potentially exposed sensitive personal information of approximately 67,835 individuals in New Hampshire alone.
Concord Orthopaedics reported the breach to the New Hampshire Attorney General's office on March 25, 2025. The practice has notified federal law enforcement and is offering identity protection services to affected individuals.
Your Rights and Next Steps
If your personal information was compromised in the Concord Orthopaedics data breach, you have important rights and options available to protect yourself:
- Enroll in Identity Protection Services: Concord Orthopaedics is offering identity protection services to affected individuals. To enroll or learn more, contact the dedicated call center at 1-855-659-0098, available Monday through Friday, 9 am to 9 pm Eastern Time.
- Monitor Your Accounts: Regularly review your financial statements, credit reports, and medical records for suspicious activity or unauthorized transactions.
- Request Your Free Credit Reports: U.S. residents are entitled to one free credit report annually from each of the three major credit reporting agencies. Obtain yours at https://www.annualcreditreport.com or by calling 1-877-322-8228.
- Place Fraud Alerts and Security Freezes: Consider placing a fraud alert or security freeze on your credit reports to prevent unauthorized access to your credit file. Contact Equifax, Experian, or TransUnion directly to initiate these protections.
- Report Identity Theft: If you suspect identity theft or fraudulent activity, report it immediately to the Federal Trade Commission (FTC) at https://www.identitytheft.gov or by calling 1-877-438-4338. You can also contact your state's Attorney General's office or local law enforcement.
- Understand Your Rights Under the Fair Credit Reporting Act (FCRA): The FCRA provides important protections, including the right to dispute inaccurate information on your credit report and to limit prescreened credit offers. Learn more about these rights at https://files.consumerfinance.gov/f/documents/bcfp_consumer-rights-summary_2018-09.pdf.
Taking these steps can help safeguard your personal information and reduce the risk of identity theft or fraud.
You May Be Entitled to Compensation
If you were impacted by the Concord Orthopaedics data breach, you may be eligible for compensation. Lawyers are ready to help affected individuals understand their rights and pursue potential claims. To see if you qualify to join a class action lawsuit, complete the form below.
Act now to protect your rights and seek the compensation you deserve.
.svg)