Peachtree Orthopedics suffers third cyberattack in seven years

Peachtree Orthopedics, an Atlanta clinic, has notified patients of a recent cyberattack, marking the third data breach incident in seven years.

The hacking group known as Karakurt targeted Peachtree Orthopedics, referencing the company in a screenshot stating "181 GB DATA" on their website.

Although initially not providing clarity, Peachtree Orthopedics subsequently coonfirmed that an unauthorized party gained access to limited systems within their computer network. While the investigation is ongoing, data breach cannot be ruled out. The type of information potentially affected varies by individual but may include name in combination with one or more of the following: address, date of birth, driver’s license number, Social Security number, medical treatment/diagnosis information, treatment cost, financial account information, and health insurance claims/provider information.

This  description of potentially involved data is consistent with Karakurt’s claim that the information they obtained includes “many lines with SSNs, almost 1000 of credit cards, other detailed personal information, medical records and tons of corporate data.”

This is the third cyberattack affecting Peachtree’s patients in seven years:

• The first incident was a massive hack and extortion attempt by thedarkoverlord hacker group in 2016, affecting 531,000 patients.
• In 2021, Peachtree Orthopedic suffered another breach involving patient data, impacting the electronic protected health information (ePHI) of 53,686 individuals.