Connecticut Orthopedic Practice Hit With Class Action Over Patient Data Breach

Jun 11, 2025 | News

A Connecticut orthopedic practice is facing a proposed class action lawsuit following a March 2 data breach that exposed patients’ personal and health information to online hackers. The lawsuit, filed in Bridgeport Superior Court, accuses Orthopaedic Specialists of Connecticut of failing to adequately protect sensitive patient data despite promising to “take all steps reasonably necessary to ensure that your data is treated securely.”

The Brookfield-based medical practice notified the U.S. Department of Health and Human Services Office for Civil Rights about the incident on April 23 and began informing patients about the breach on the same date. However, lead plaintiff Mary Goodman argues that affected patients “were, and continue to be, at significant risk of identity theft and various other forms of personal, social, and financial harm” with risks that “will remain for their respective lifetimes.”

Inadequate Breach Response

The lawsuit criticizes the medical practice’s breach notification as deficient, alleging it failed to explain what caused the breach, identify responsible parties, or describe how the incident occurred. The notice also allegedly failed to detail what efforts were being taken to prevent future breaches.

According to the attached incident notice, Orthopaedic Specialists described the event as a “network disruption” on March 2. The practice stated it investigated the incident, contacted law enforcement, “wiped and rebuilt affected systems,” and took additional steps to “bolster network security.” The company offered 24 months of free credit monitoring services and claimed there was no evidence the stolen information was actually misused.

Security Standards and Legal Claims

The complaint alleges that Orthopaedic Specialists failed to follow HIPAA and Federal Trade Commission privacy guidelines along with other industry cybersecurity standards. The lawsuit asserts that by collecting and benefiting from patients’ private information, the practice “assumed legal and equitable duties” to protect that data.

The proposed class action includes all Connecticut residents affected by the breach and seeks damages for negligence, negligence per se, unjust enrichment, and breach of fiduciary duty. The complaint notes that Orthopaedic Specialists was founded in 1978 and generates approximately $6 million in annual revenue.

Siri & Glimstad LLP attorney Oren Faircloth represents the proposed class alongside Leanna A. Loginov of Shamis & Gentile PA. The practice’s website includes a toll-free number for patient inquiries and “sincerely apologizes for any inconvenience this incident may cause.”

The case is Mary Goodman v. Orthopaedic Specialists of Connecticut in the Bridgeport Judicial District of the Connecticut Superior Court.

Read Full Article Here