Golden State Orthopedics & Spine, a multispecialty orthopedic and spine medical group based in Northern California, detected unusual activity within its network on or around July 2, 2026. This activity followed a ransomware group named Brain Cipher claiming on July 1, 2026, to have obtained 150 GB of the organization's data and threatening to publish it. The company secured its systems and engaged third-party forensic experts, who later confirmed that a limited amount of protected health information may have been accessed without authorization.
The compromised data types include first and last names, addresses, dates of birth, Social Security numbers, health insurance information, and medical diagnosis information. The number of affected individuals has not been publicly disclosed. While the company stated it had no evidence of actual misuse of the information, it posted a notice on its website on August 27, 2026, and implemented additional security measures.
Details regarding the number of affected individuals remain unclear. Further information may emerge as the investigation progresses, and specific notices may be delayed for some affected individuals.