Metro Tulsa Foot & Ankle Specialists, PLLC experienced a cyber incident after discovering unusual network activity on July 29, 2026. A subsequent investigation determined that unauthorized parties accessed the practice's computer systems and copied files without authorization on July 30, 2026. Third-party reports attributed the unauthorized extraction to the INSOMNIA ransomware group. The medical practice completed its internal review of the impacted files on October 21, 2026, and began mailing notifications on October 28, 2026.
The compromised records contained patient and financial details, which varied by individual. Confirmed exposed data elements include full names, residential addresses, dates of birth, Social Security numbers, patient identification numbers, medical information, health insurance details, financial account codes, and credit or debit card data. Although the total nationwide number of affected individuals has not been disclosed, a filing submitted to the Vermont Attorney General reported six affected residents in that state.
Law firms have initiated legal investigations regarding the security practices surrounding the incident. Regulators in affected jurisdictions were notified in late October 2026, and the full extent of impacted individuals across other states remains unconfirmed as notices continue to be processed.