113,330 Americans were affected after an “unauthorized third party” hacked a healthcare company, compromising a range of personal, financial and medical data.

A security incident involving a health care provider in Colorado put the sensitive data of thousands of Americans at risk.

In a letter For affected individuals, Western Orthopedics, PC (Western Ortho) says that between September 17, 2025 and September 25, 2025, an unauthorized third party Access and obtain some data within its network. The company says it learned of the incident on October 2, 2025.

Western Ortho then took steps to secure its network and conducted an investigation with the assistance of its contracted cybersecurity team and external cybersecurity experts.

The analysis, which concluded on March 3, showed that the event compromised a wide range of patient data, including full names and addresses; telephone numbers; social security numbers; dates of birth; Financial accounts and credit/debit card numbers with or without a security code, access code or password required.

The incident also exposed protected health information, including health insurance or health plan information or subscriber identification numbers, names of medical providers, dates of medical service, and medical costs or billing information.

Western Ortho is providing affected individuals with free credit monitoring and identity protection services, though the company says it has found no indication of identity theft or fraud in connection with the hacking incident.

The U.S. Department of Health and Human Services’ Office for Civil Rights says 113,330 individuals were affected by the breach.

Follow us on X, Facebook and cable

Never miss a beat – Subscribe Get email alerts delivered directly to your inbox

browse Hodel’s daily mix

Generated image: mid-flight