Metro Tulsa Foot & Ankle Specialists, PLLC detected unusual network activity within its computer systems on July 29, 2026. A subsequent forensic investigation determined that an unauthorized third party copied data from its network on or about July 30, 2026. The medical practice concluded its investigation on October 21, 2026, and issued a formal Notice of Data Privacy Event on October 28, 2026, while also submitting a notification to the Vermont Attorney General.
The compromised files contained sensitive personal, clinical, and financial information. Potentially exposed data elements include patient names, addresses, dates of birth, Social Security numbers, patient identification numbers, medical information, health insurance details, and financial account information. The total number of impacted patients and individuals has not yet been publicly disclosed by the practice.
Notification letters were mailed to individuals whose information was identified within the affected files. As investigations and regulatory reviews proceed, additional details regarding the scope of the incident and total affected counts may become available.