Concord Orthopaedic Notifies Individuals of Security Incident

Concord Orthopaedic disclosed that on November 21, 2024 a third‑party patient check‑in application was potentially accessed by an unauthorized actor, which may have exposed patient registration and appointment intake information (including names, dates of birth, Social Security numbers, insurance details, and driver’s license numbers); COPA reports no evidence the clinic’s internal environment or EHR was affected, engaged external cybersecurity specialists, reset access to the third‑party software, and provided a call center and web notice for affected individuals.