INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Casper Orthopedic Associates Data Compromised in Breach with Atlantic Specialists

| 2026-10-08 15:32 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
On October 8, 2026, Casper Orthopedic Associates and Atlantic Digestive Specialists announced data breaches affecting a combined total of at least 56,197 individuals. The attacks occurred between May 23, 2026, when the incidents were discovered by Casper Orthopedic Associates, and March 17, 2026, when Atlantic Digestive Specialists determined unauthorized access to its network had taken place. An investigation concluded on June 11, 2026, for Casper Orthopedic Associates, while Atlantic Digestive Specialists completed their data review on September 8, 2026. The breaches exposed patient data including names, dates of birth, driver’s license numbers, Social Security numbers, financial account information, and medical information. Notification letters were mailed to the affected individuals starting from September 30, 2026.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope financefinance healthhealth
Incident Timeline
‎March 2026
Threat actors accessed Atlantic Digestive Specialists' network between March 16, and March 17, 2026.
organisation Atlantic Digestive Specialists
Atlantic Digestive Specialists said it was alerted to suspicious network activity in March 2026 and, assisted by third-party cybersecurity experts, determined that an unauthorized third party accessed its network between March 16, 2026, and March 17, 2026, and potentially acquired files containing patient information.
‎March 16, 2026
Casper Orthopedic Associates and Atlantic Digestive Specialists experienced data breaches, likely involving unauthorized access to their sensitive patient information.
industry Health
General Document Context
industry Finance
General Document Context
‎between March 16, 2026
Threat actors accessed Atlantic Digestive Specialists' network between March 16, and March 17, 2026.
organisation Atlantic Digestive Specialists
Atlantic Digestive Specialists said it was alerted to suspicious network activity in March 2026 and, assisted by third-party cybersecurity experts, determined that an unauthorized third party accessed its network between March 16, 2026, and March 17, 2026, and potentially acquired files containing patient information.
‎March 17, 2026
Atlantic Digestive Specialists' network was accessed by an unauthorized third party between March 16 and March 17, 2026.
industry Health
General Document Context
industry Finance
General Document Context
organisation Atlantic Digestive Specialists
Atlantic Digestive Specialists said it was alerted to suspicious network activity in March 2026 and, assisted by third-party cybersecurity experts, determined that an unauthorized third party accessed its network between March 16, 2026, and March 17, 2026, and potentially acquired files containing patient information.
‎May 23, 2026
Casper Orthopedic Associates was the victim of a cyberattack on May 23, 2026.
industry Health
General Document Context
industry Finance
General Document Context
‎June 11, 2026
Patient data may have been acquired by an unauthorized third party during the incident at Casper Orthopedic Associates and Atlantic Digestive Specialists.
industry Health
General Document Context
industry Finance
General Document Context
‎September 2, 2026
Threat actors exploited vulnerabilities in Casper Orthopedic Associates and Atlantic Digestive Specialists' systems to breach their sensitive health information.
industry Health
General Document Context
industry Finance
General Document Context
‎September 8, 2026
Threat actors successfully breached the data of Casper Orthopedic Associates and Atlantic Digestive Specialists, exposing a combination of names, dates of birth, driver's license numbers, Social Security numbers, financial account information, and medical information.
industry Health
General Document Context
industry Finance
General Document Context
organisation Medicaid/Medicare
The data review was completed on September 8, 2026, when it was confirmed that the impacted data included names in combination with some or all of the following: date of birth, Social Security number, driver’s license/state identification number, financial account information, payment card information, alien registration number, taxpayer identification number, passport number, clinical informati…
organisation Social Security
The impacted data included a combination of names, dates of birth, driver’s license numbers, Social Security numbers, financial account information, and medical information.
‎September 30, 2026
Notification letters were mailed to affected individuals on September 30, 2026.
industry Health
General Document Context
industry Finance
General Document Context
‎Oct 8, 2026
Casper Orthopedic Associates notified 56,197 individuals about a cybersecurity incident that exposed some of their protected health information.
industry Health
General Document Context
industry Finance
General Document Context
‎2026/10/08
Threat actors exploited a vulnerability in Casper Orthopedic Associates' and Atlantic Digestive Specialists' systems to breach their data.
organisation Casper Orthopedic Associates
Casper Orthopedic Associates; Atlantic Digestive Specialists Announce Data Breaches.
organisation Atlantic Digestive
Casper Orthopedic Associates; Atlantic Digestive Specialists Announce Data Breaches.
Intelligence Sources
HIPAA Journal 2026-10-08