Email hack could affect data of 2,800 patients of Washington practice

The hack of an employee’s email account at Rebound Orthopedics & Neurosurgery in Vancouver, Wash., may have compromised the records of about 2,800 patients.

The practice reported the breach and said it is supplying identity theft protection and credit monitoring services for its patients after the incident.

On May 22, an unknown person gained access to an employee’s email account, Rebound Orthopedics told patients in a notification letter.

Also See: How cyber insurance can better protect providers from hacking costs

“We quickly took action and notified our IT department of the incident, who prevented any further unauthorized access. We also retained a computer forensic company and conducted a detailed forensic investigation to determine what information may have been accessed,” the letter indicated.




Compromised information may have included patient names, dates of birth, Social Security numbers, driver license numbers, financial account information and limited health information.

Remediation work launched following the breach included additional employee training and testing what employees learned, deploying dual-factor authentication and implementing policy that requires periodic password changes for email accounts.

In addition to offering protective services from Kroll, Rebound Orthopedics & Neurosurgery also gave affected individuals information on how to obtain a copy of their credit report and how to place a fraud alert on the credit report.