A ransomware group claims it stole patient data, including Social Security numbers, addresses, and medical records, from Southwest Orthopedic & Reconstructive Specialists, an Oklahoma clinic. The clinic has not confirmed the incident. Affected patients should monitor credit reports, consider a credit freeze, and watch insurance statements for unfamiliar charges.
| Company | Southwest Orthopedic & Reconstructive Specialists |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Patient Names, Home Addresses, Social Security Numbers, Medical Records, Billing Information |
| People Affected | 150,000 individuals |
| Attack Method | Ransomware |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Southwest Orthopedic & Reconstructive Specialists Data Breach?
A ransomware group has claimed it accessed and stole sensitive data belonging to Southwest Orthopedic & Reconstructive Specialists, an Oklahoma healthcare clinic. The group posted its claim on a dark web leak site, stating that it obtained databases containing patient records. As of now, the clinic has not publicly confirmed this incident.
According to the group’s own statement, the alleged intrusion involved patient names, addresses, Social Security numbers, medical records, and billing information. The exact timeline of the claimed attack has not been publicly disclosed. Because this report comes from the attacker rather than the organization, important details remain unverified.
No independent forensic confirmation has been made public at this time. As a result, it is not yet known whether the clinic has launched a formal investigation or hired outside cybersecurity experts to assess the claim. This article will be updated if the organization issues a public statement or confirms any aspect of the alleged breach.
Who was affected?
The ransomware group claims the exposed data belongs to patients of Southwest Orthopedic & Reconstructive Specialists. Because the clinic provides orthopedic and reconstructive care, those potentially affected would likely include current and former patients who received treatment or billing services there.
The attackers claim more than 150,000 individuals may be included in the stolen data. However, this number comes solely from the extortion group’s own post and has not been verified by the clinic or any regulator. Until the organization confirms details, the true scope of affected individuals, including whether minors or out-of-state patients are involved, remains unclear.
What Information Was Potentially Exposed?
The ransomware group’s claim describes several categories of sensitive patient information. Because this comes from an unverified attacker statement, these categories should be treated as alleged rather than confirmed. The following reflects what the group says was taken.
- Patient names
- Home addresses
- Social Security numbers
- Medical records
- Billing information
If these claims are accurate, affected patients could face a heightened risk of identity theft. Social Security numbers combined with names and addresses give criminals nearly everything needed to open fraudulent credit accounts or file false tax returns. This type of combination is especially valuable on illicit marketplaces.
In addition, exposed medical records and billing data could fuel medical identity theft. This happens when someone uses stolen information to obtain treatment, prescriptions, or insurance payouts under another person’s name. Victims may not discover this until they receive confusing medical bills or denied claims years later.
What is the company doing?
Southwest Orthopedic & Reconstructive Specialists has not publicly confirmed the ransomware group’s claims. Therefore, no official response, investigation update, or notification process has been disclosed at this time. Patients should not assume that credit monitoring or similar protections have been offered until the clinic makes a formal statement.
Because the incident remains unconfirmed, it is also unclear whether law enforcement has been contacted or whether the clinic has brought in a forensic cybersecurity firm. This article will be updated with any verified information once the organization responds publicly or regulators receive formal notification.
What Should Affected Individuals Do?
Monitor Your Credit Reports Regularly
Affected patients should check their credit reports from all three major bureaus on a regular basis. Doing so can help you spot new accounts or inquiries you did not authorize. You can request free reports weekly through AnnualCreditReport.com.
Because Social Security numbers were allegedly included in this claimed breach, the risk of long-term credit fraud is elevated. As a result, reviewing your reports every few months, rather than just once, gives you a better chance of catching fraud early.
Consider a Credit Freeze or Fraud Alert
If you believe your Social Security number may have been exposed, placing a credit freeze with Equifax, Experian, and TransUnion is one of the strongest protective steps available. A freeze blocks new creditors from accessing your credit file, which makes it much harder for criminals to open accounts in your name.
Alternatively, a fraud alert requires lenders to take extra verification steps before approving new credit. This option is less restrictive than a freeze but still adds a meaningful layer of protection. Either step can typically be set up online or by phone within minutes.
Watch for Medical Identity Theft Warning Signs
Because medical records and billing information were allegedly part of this claimed breach, patients should also review statements from their health insurance provider. Look closely for any services, prescriptions, or visits you do not recognize.
If you spot unfamiliar charges, contact your insurer immediately to dispute them. In addition, request a copy of your medical records to confirm there are no inaccuracies that could affect future treatment decisions or insurance coverage.
Stay Alert to Phishing and Scam Attempts
Following any reported data breach, scammers often send emails or texts pretending to be the breached organization. These messages may ask you to click a link or confirm personal details. Be cautious of any unsolicited communication claiming to be from the clinic.
Instead of clicking links in unexpected messages, go directly to the official website or call a verified phone number. This simple habit can prevent you from accidentally handing over login credentials or financial information to a scammer.
Consult a Data Breach Attorney
Given the sensitive nature of the data allegedly involved, affected individuals may want to speak with a data breach attorney. An attorney can help you understand whether you qualify for compensation if the breach is later confirmed.
Many attorneys offer free consultations and only collect fees if your case succeeds. This makes it a low-risk way to explore your options while staying informed about any developments in this situation.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.