Orthopaedic Oops: Excelsior’s Data Breach Leaves 357,000 Patients in the Lurch
Excelsior Orthopaedics, a healthcare provider in New York, experienced a data breach affecting 357,000 individuals. This breach, linked to a ransomware attack, compromised sensitive patient and employee information. As a result, Excelsior is offering a year of free credit monitoring to those impacted.

Hot Take:
Looks like Excelsior Orthopaedics got a free pass to the ‘Breach of the Month’ club! With 357,000 people now enrolled in the identity-theft Olympics, it seems like cybercriminals are the only ones getting a clean bill of health. Who knew a trip to the orthopaedic clinic could lead to such a spine-tingling adventure?
Key Points:
- Excelsior Orthopaedics was hit by a ransomware attack in June 2024, affecting 357,000 individuals.
- Data compromised includes personal and health information such as Social Security numbers and medical records.
- Initial notifications underestimated the breach’s scope, leading to a second wave of alerts in December.
- The Monti ransomware gang claims responsibility, boasting about the theft of 300 gigabytes of data.
- Excelsior offers affected individuals a year of free credit monitoring and fraud assistance.
Already a member? Log in here