Atlantic Digestive Specialists; Casper Orthopedic Associates Announce Data Breaches
Data breaches have been announced by Atlantic Digestive Specialists in New Hampshire and Casper Orthopedic Associates in Wyoming.
Atlantic Digestive Specialists
Atlantic Digestive Specialists, a multi-location gastroenterology practice in New Hampshire, has disclosed a security incident involving unauthorized access to systems containing patient information. Atlantic Digestive Specialists said it was alerted to suspicious network activity in March 2026 and, assisted by third-party cybersecurity experts, determined that an unauthorized third party accessed its network between March 16, 2026, and March 17, 2026, and potentially acquired files containing patient information.
The data review was completed on September 8, 2026, when it was confirmed that the impacted data included names in combination with some or all of the following: date of birth, Social Security number, driver’s license/state identification number, financial account information, payment card information, alien registration number, taxpayer identification number, passport number, clinical information, diagnosis, mental/physical condition, medical history, medical record number, medical treatment information, prescription information, Medicaid/Medicare number, medical cost, dates of service, provider name, patient account number, health insurance information, username/password information, and digital/electronic signature. Notification letters started to be mailed to the affected individuals on September 30, 2026.
Avail of a Free 30-Minute
Cybersecurity Consultation
with Blue Team Alpha
Review your security program, get advice on a specific cybersecurity concern, identify risk-reduction priorities, or take the first step toward your annual HIPAA Security Risk Assessment.
Learn More About This Offer
Since this article was first published, the incident has been added to the HHS’ Office for Civil Rights breach portal. The listing shows that the protected health information of 173,853 individuals was involved.
Casper Orthopedic Associates
Casper Orthopedic Associates, an orthopedic medical practice in Casper, Wyoming, has notified 56,197 individuals about a cybersecurity incident that exposed some of their protected health information. Casper Orthopedic Associates said it discovered it was the victim of a cyberattack on May 23, 2026, and engaged third-party cybersecurity experts to help contain, remediate, and investigate the incident.
The investigation concluded on June 11, 2026, and determined that patient data may have been acquired by an unauthorized third party in the incident. The data review was completed on September 2, 2026, and notification letters were mailed to the affected individuals on September 8, 2026. The impacted data included a combination of names, dates of birth, driver’s license numbers, Social Security numbers, financial account information, and medical information.
