Breached information includes patient social security numbers, treatment plans and insurance information.
The breach was first detected by Lancaster Orthopedics on March 29 and was later reported to the U.S. Department of Health and Human Services on May 26, according to the report.
Lancaster’s CEO said that it is complying with the FBI to identify all patients impacted by the incident. As of July 20, there is no evidence that patient information has been misused as a result of the breach.
