INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Desert Orthopaedic Center Reports Data Breaches

| 2026-10-12 16:13 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A data breach was reported by Secure Healthcare Information Management and Desert Orthopaedic Center in Nevada on October 12, 2026. The incident is believed to have occurred between July 6, 2026, and July 16, 2026, when an unauthorized third party accessed the network of Secure Healthcare Information Management, potentially exposing patient information such as names, birth dates, Social Security numbers, driver's license numbers, medical information, and health insurance information. The review of exposed data concluded on September 18, 2026, confirming that approximately 5 locations in Las Vegas and Henderson, Nevada (Desert Orthopaedic Center) were affected by the incident. An investigation determined that the unauthorized access was detected around August 7, 2026. Affected individuals started to be notified on October 6, 2026, with complimentary identity protection services being offered; however, it is currently unclear how many individuals have been affected due to the incident not yet showing up on the OCR breach portal.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope healthhealth
Incident Timeline
‎July 6, 2026
Threat actors exploited a vulnerability in the Desert Orthopaedic Center's reporting system to gain unauthorized access to protected healthcare information on July 6, 2026.
industry Health
General Document Context
‎between July 6, 2026
Threat actors accessed the Desert Orthopaedic Center's network between July 6, 2026, and July 16, 2026.
‎July 16, 2026
An unauthorized third party accessed the Desert Orthopaedic Center's network between July 6, and July 16, 2026.
industry Health
General Document Context
‎July 17, 2026
Threat actors experienced a network disruption at the Desert Orthopaedic Center on July 17, 2026.
industry Health
General Document Context
‎August 7, 2026
Threat actors targeted the Desert Orthopaedic Center, but it is unclear how many individuals have been affected due to the incident not being reported on the HHS Office for Civil Rights breach portal.
industry Health
General Document Context
organisation the HHS Office for Civil Rights
The incident is not yet shown on the HHS Office for Civil Rights breach portal, so it is currently unclear how many individuals have been affected.
‎September 18, 2026
Patient information, including names, birth dates, Social Security numbers, driver's license numbers, medical information, and health insurance details, was exposed and potentially acquired.
industry Health
General Document Context
organisation Social Security
The review of the exposed data concluded on September 18, 2026, confirming that patient information such as names, birth dates, Social Security numbers, driver’s license numbers, medical information, and health insurance information was exposed and potentially acquired.
‎October 6, 2026
The affected individuals at Desert Orthopaedic Center began receiving notifications on October 6, 2026, about a data breach.
industry Health
General Document Context
organisation The HHS’ Office for Civil Rights
The HHS’ Office for Civil Rights has been informed; however, the incident is not yet shown on the OCR breach portal, so it is currently unclear how many individuals have been affected.
organisation OCR
The HHS’ Office for Civil Rights has been informed; however, the incident is not yet shown on the OCR breach portal, so it is currently unclear how many individuals have been affected.
‎Oct 12, 2026
Threat actors used unknown methods to target Secure Healthcare Information Management and Desert Orthopaedic Center, resulting in potential unauthorized access to patients' personal and protected health information.
industry Health
General Document Context
organisation Desert Orthopaedic Center
Secure Healthcare Information Management; Desert Orthopaedic Center Report Data Breaches Posted By Steve Alder on Oct 12, 2026 Data breaches have been announced by the Pennsylvania-based medical management and billing service provider Secure Healthcare Information Management and Desert Orthopaedic Center in Nevada.
organisation LLC
Secure Healthcare Information Management The Allentown, Pennsylvania-based medical management and billing service provider, Secure Healthcare Information Management, LLC, has announced a recent security incident that may have resulted in unauthorized access to patients’ personal and protected health information.
‎2026/10/12
Threat actors used social engineering tactics to gain unauthorized access to patient data at Desert Orthopaedic Center, which was subsequently reviewed by Secure Healthcare Information Management.
organisation Secure Healthcare Information Management
Secure Healthcare Information Management; Desert Orthopaedic Center Report Data Breaches.
organisation Desert Orthopaedic Center Report Data Breaches
Secure Healthcare Information Management; Desert Orthopaedic Center Report Data Breaches.
organisation Medicare
The unauthorized access was detected on or around August 7, 2026, and the data review determined that the impacted information included names, contact information, dates of birth, Social Security numbers, treatment/diagnosis information, prescription/medication information, dates of service, provider names and locations, medical record numbers, patient account numbers, Medicare/Medicaid ID numbe…
Intelligence Sources
HIPAA Journal 2026-10-12