Ozark Orthopaedics in Fayetteville, Ark., recently informed patients of a data breach after it noticed unusual activity within its email system in October.
According to the U.S. Department of Health & Human Services, 15,240 patients may have been affected.
Four employee email accounts were found to have personal and medical information belonging to Ozark patients.
This information may have included patient names and treatment information, health insurance details, Social Security numbers and financial account information.
Ozark notified potentially affected patients Feb. 28 after an investigation revealed details of the security breach.
This is the third data breach in Arkansas reported to HHS this year.