Quick note to point out that three of TheDarkOverlord’s victims have reported their breaches to HHS, although the numbers they report do not always match what had been claimed by TDO and previously reported in the media:
- Midwest Orthopedic Pain and Spine reported that 29,153 patients (not 48,000) were affected;
- Athens Orthopedic Clinic reported that 201,000 patients (not 397,000) were affected; and
- Prosthetic & Orthotic Care, Inc. reported that 23,015 patients were affected which is very close to what TDO had claimed).
Oddly, perhaps, Athens Orthopedic Clinic reported the incident as “Unauthorized Access/Disclosure” as opposed to Hacking/IT Incident, which I think is the more appropriate classification for what happened and what the other two victims reported.