Pinnacle Orthopaedics & Sports Medicine Specialists hit by INC Ransom

On April 22, **Pinnacle Orthopaedics & Sports Medicine Specialists LLC** discovered a cyberattack later claimed by INC Ransom; after initially identifying fewer than 10 affected patients, the investigation expanded to more than 500, prompting a [press release](https://www.prnewswire.com/news-releases/pinnacle-orthopaedics--sports-medicine-specialists-notifies-individuals-of-data-security-incident-302179419.html) and a [substitute notice](https://www.pinnacle-ortho.com/pinnacle-substitute-notice) while reviews continued. The threat actors posted proof of access on May 2 and leaked data on May 20, exposing older files containing PHI (notably multi-year aging sheets with patient names, dates of service, insurance details, services, and balances), with no evidence of EMR system involvement; HHS notification was indicated but not yet posted.