US-MA
Timeline
- March 16, 2026Press coverage Press
press report (acknowledged): determined that an unauthorized third party accessed its network between March 16, 2026, and March 17, 2026
source - May 23, 2026Press coverage Press
press report (acknowledged): Casper Orthopedic Associates said it discovered it was the victim of a cyberattack on May 23, 2026
source - September 8, 2026Press coverage Press
press report (individuals_notified): notification letters were mailed to the affected individuals on September 8, 2026
source - September 30, 2026Press coverage Press
press report (individuals_notified): Notification letters started to be mailed to the affected individuals on September 30, 2026
source - October 1, 2026Reported to regulator Regulator
MA AG breach notification: 1,489 Massachusetts residents affected
source
What a Massachusetts notice means
Governed by M.G.L. c. 93H. Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.
Note: the count is Massachusetts residents only, not a total.