Metro Tulsa Foot & Ankle Specialists, PLLC disclosed a network security incident involving unauthorized data access and copying. The medical practice detected unusual activity in its network environment on July 29, 2026, and determined that data may have been copied without authorization on July 30, 2026. After completing an internal data review on October 21, 2026, the organization reported the incident to regulators, including the Vermont Attorney General on October 28, 2026.
The compromised files contained varying categories of personal, financial, and clinical information depending on the individual. Exposed data types include names, addresses, dates of birth, Social Security numbers, patient identification numbers, medical information, health insurance details, and financial account or credit and debit card information. A filing with Vermont state authorities confirmed six affected residents, while the total nationwide count of impacted individuals has not been publicly specified.
The practice mailed individual breach notices to patients with valid addresses on file and offered credit monitoring services. In cybersecurity incidents involving forensic reviews of network environments, final figures regarding the total number of individuals impacted may be updated as regulatory reporting continues.