Latham-based OrthopedicsNY has agreed to pay $1.45 million to settle a class-action lawsuit involving a data breach from December 2023, according to an April 8 report from The HIPAA Journal.
The cyber attackers accessed patient data including names, contact information, financial information, protected health information, Social Security numbers, passport numbers and driver’s license numbers.
In 2025, OrthopedicsNY agreed to pay $500,000 to the New York State Attorney General in penalties over failing to protect patient information related to the breach. The settlement with the OAG requires the practice to implement additional security measures, including annual risk assessments.
The information of more than 650,000 patients was exposed in the breach.
OrthopedicsNY agreed to the settlement to avoid the cost and time of litigation and uncertainty of a trial, the report said.
At the Becker's 23rd Annual Spine, Orthopedic and Pain Management-Driven ASC + The Future of Spine Conference, taking place June 11-13 in Chicago, spine surgeons, orthopedic leaders and ASC executives will come together to explore minimally invasive techniques, ASC growth strategies and innovations shaping the future of outpatient spine care. Apply for complimentary registration now.
