Data breaches have been announced by the Pennsylvania-based medical management and billing service provider Secure Healthcare Information Management and Desert Orthopaedic Center in Nevada.
Secure Healthcare Information Management
The Allentown, Pennsylvania-based medical management and billing service provider, Secure Healthcare Information Management, LLC, has announced a recent security incident that may have resulted in unauthorized access to patients’ personal and protected health information.
According to its website breach notice, a network disruption was experienced on July 17, 2026. Action was immediately taken to secure its network, and an investigation was launched to determine the cause of the disruption. The investigation determined that its network was accessed by an unauthorized third party between July 6, 2026, and July 16, 2026. The review of the exposed data concluded on September 18, 2026, confirming that patient information such as names, birth dates, Social Security numbers, driver’s license numbers, medical information, and health insurance information was exposed and potentially acquired.
The affected individuals started to be notified on October 6, 2026, and complimentary identity protection services are being offered. The HHS’ Office for Civil Rights has been informed; however, the incident is not yet shown on the OCR breach portal, so it is currently unclear how many individuals have been affected.
Desert Orthopaedic Center
Desert Orthopaedic Center, an orthopedic medical group with five locations in Las Vegas and Henderson, Nevada, is notifying certain patients about a data security incident that may have resulted in patients’ personal and protected health information being accessed and acquired by an unauthorized third party.
The unauthorized access was detected on or around August 7, 2026, and the data review determined that the impacted information included names, contact information, dates of birth, Social Security numbers, treatment/diagnosis information, prescription/medication information, dates of service, provider names and locations, medical record numbers, patient account numbers, Medicare/Medicaid ID numbers, health insurance information, and/or medical billing/claims information.
Notification letters started to be mailed to the affected individuals in early October, and complimentary credit monitoring and identity theft protection services have been made available. The incident is not yet shown on the HHS Office for Civil Rights breach portal, so it is currently unclear how many individuals have been affected.
