A ransomware group claims it stole about 20 GB of data from Collier Sports Medicine and Orthopedic Center, a US healthcare provider. The organization has not confirmed the incident, and the specific data types involved remain undisclosed. If you received care there, monitor your credit reports and watch for official notice before taking further action.
| Company | Collier Sports Medicine and Orthopedic Center |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Not Publicly Disclosed |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Delaware Attorney General, Oregon Department of Justice, Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Collier Sports Medicine and Orthopedic Center Data Breach?
A ransomware group has claimed responsibility for stealing data from Collier Sports Medicine and Orthopedic Center. The group says it took roughly 20 GB of files from the organization’s network. However, Collier Sports Medicine and Orthopedic Center has not publicly confirmed this claim.
According to the posting, the attackers listed the healthcare provider as a victim on a dark web leak site. This is a common tactic used by extortion groups to pressure organizations into paying a ransom. As a result, the claim alone does not confirm exactly when the intrusion happened or how attackers got in.
Because the breach discovery date has not been publicly disclosed, it remains unclear how long the attackers may have had access before detection. In addition, there is no public confirmation yet describing any forensic investigation, containment steps, or root-cause analysis. Readers should treat the claim as unverified until the organization issues its own statement.
Who was affected?
The exact number of affected individuals has not been publicly disclosed. Given that Collier Sports Medicine and Orthopedic Center operates in the healthcare sector, any confirmed breach would likely involve patients. It could also involve staff members whose employment records sit on the same network.
Because the organization provides orthopedic and sports medicine care, affected individuals could span a wide range of ages. This may include minors who received treatment for sports injuries. Until the company releases an official notification, the full scope of who was affected cannot be confirmed.
What Information Was Potentially Exposed?
At this time, the specific types of information involved have not been publicly disclosed. The ransomware group’s claim references a volume of stolen data, but it does not list the categories of records inside that data. Therefore, this section cannot confirm which personal details may have been taken.
Even without confirmed categories, it is worth understanding the general risks tied to healthcare data breaches. For example, medical providers typically store names, contact details, insurance information, and treatment records. If any of that data were eventually confirmed as stolen, affected patients could face a higher risk of identity theft or insurance fraud.
Similarly, healthcare breaches sometimes lead to phishing attempts that impersonate the provider or a related insurer. Because scammers often use publicly known breach events as cover, affected individuals should stay alert to unexpected calls or emails. This risk exists whether or not specific data categories are ever confirmed.
What is the company doing?
Collier Sports Medicine and Orthopedic Center has not publicly confirmed this incident. As a result, there is no public statement describing an internal investigation, remediation steps, or notification timeline tied to this specific ransomware claim. Readers should be cautious of any source claiming otherwise.
Separately, public regulatory records show that Collier Sports Medicine and Orthopedic Center has filed data breach notifications tied to prior incidents. These filings went to the Delaware Attorney General in late 2022 and early 2023. The organization also filed with the Oregon Department of Justice in mid-2024.
In addition, records show a filing with the Vermont Attorney General in August 2026. These filings demonstrate the organization’s general practice of notifying regulators when breaches are confirmed. However, no such filing has yet been tied specifically to this newly claimed ransomware incident.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Because healthcare breaches can sometimes lead to identity theft, it is wise to check your credit reports regularly. You can request free reports from each of the three major credit bureaus. Reviewing them helps you spot new accounts or inquiries you did not authorize.
If you notice anything unfamiliar, report it right away. Acting quickly can limit the damage caused by fraudulent activity. This step costs nothing and takes only a few minutes to complete.
Watch for Phishing Attempts
Scammers often use breach news as an opportunity to send fake emails or text messages. These messages may pretend to be from Collier Sports Medicine and Orthopedic Center or a related insurer. Therefore, avoid clicking links or sharing information in unsolicited messages.
Instead, contact the organization directly using a phone number or website you already trust. This verification step protects you from handing over sensitive details to a scammer. Because phishing tactics constantly evolve, staying skeptical is your best defense.
Consider a Fraud Alert if Confirmed Details Emerge
If the organization later confirms that Social Security numbers or financial information were stolen, placing a fraud alert can help. A fraud alert tells lenders to take extra steps before approving new credit in your name. This can slow down identity thieves significantly.
You can also consider a credit freeze, which is generally stronger than an alert. A freeze blocks new creditors from accessing your credit file at all. Both options are free and can be lifted later if needed.
Keep Records and Watch for Official Notice
Because this incident has not yet been confirmed by the organization, affected individuals should watch for an official notification letter. This letter would typically explain exactly what data was involved. In the meantime, save any communication related to this claim for your records.
If you do receive an official notice, read it carefully and follow its specific recommendations. For example, it may include a free credit monitoring offer or a dedicated support hotline. Keeping documentation also helps if you later decide to consult a data breach attorney for a free case evaluation.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
Official data breach notification report (PDF) from Delaware Attorney General
View the public data breach notification listing from Oregon Department of Justice
View the public data breach notification listing from Vermont Attorney General