The clinic is permitted up to 60 days following the discovery of a data breach to alert patients under Health Insurance Portability and Accountability Act Rules. Peachtree Orthopedics said rapid action was taken to contain the breach to prevent further access to patient health data, although the substitute breach notice posted on the company’s website suggests patient data were actually stolen by the hacker. A number of patients also had their Social Security numbers, prescription records, and treatment codes exposed. The hacked database contained the records of patients that had visited the orthopedic clinic prior to July 2014, although some patients who visited after that date have also potentially been affected. Peachtree Orthopedics has confirmed the hacked system contained names, addresses, dates of birth, and email addresses. That individual managed to gain access to a patient database. On September 22, 2016, the orthopedic clinic discovered its computer systems had been accessed by an unauthorized individual. Atlanta, GA-based Peachtree Orthopedics, a provider of orthopedic services in Cherokee, Cobb, Forsyth, Fulton and Gwinnett counties and metro Atlanta, has notified 531,000 patients that their protected health information has been compromised.

Peachtree orthopedics