Athens Orthopedic Clinic recently experienced a data breach due to an external cyber-attack on our electronic medical records. The breach occurred when a hacker used the credentials of an outside contractor who performed certain services for the Clinic.
Personal information of our current and former patients has been breached, including names, addresses, social security numbers, dates of birth and telephone numbers, and in some cases diagnoses and partial medical history. No banking or payment information is stored at AOC and was not a part of the breach.
If you were a patient of any Athens Orthopedic Clinic location or the patient of a doctor or provider who worked with any of our locations on or before June 14, 2016, we regret to tell you that that our electronic medical records system has been compromised and that your personal information is vulnerable.
Click here to read about what you should do to protect yourself.
Please watch this video message from Kayo Elliott, CEO of Athens Orthopedic Clinic:
When we first learned on June 28 that there may have been a breach, we immediately hired cyber-security experts and notified the FBI. We did not make any public disclosure of the breach at that time so as not to interfere with their investigation or push the hacker into a mass public release of data. We confirmed several days later that, in fact, our electronic medical records had been hacked on June 14. It then took several weeks to confirm what data, and of which patients, was taken. We immediately began compiling a list of the patients whose data was taken so that we could mail notices to them as soon as possible.
As soon as we learned that the hacker publicly released some data, we immediately issued a press release, put statements on our website and Facebook page, and continued trying to get letters mailed.
To protect against such breaches in the future, Athens Orthopedic Clinic’s cyber-security experts have made recommendations for additional improvements to our system, and we’ve begun implementing these recommendations.
We apologize for the stress and worry this situation is causing our patients and their families. We are committed to keeping patient information safe and assure you we are doing everything possible to retain your trust in our practice.
You may want to read this letter to the editor the Athens Banner Herald published on August 7, written by Dr. Chip Ogburn, our trauma surgeon.