Western Orthopaedics P.C. experienced a data breach stemming from unauthorized network access that occurred between September 17, 2025, and September 25, 2025. The PEAR ransomware group claimed responsibility on October 4, 2025. The company completed its investigation on March 3, 2026, and publicly disclosed the incident on May 5, 2026.
This incident involved the exposure of various data types, including full names, addresses, phone numbers, Social Security numbers, dates of birth, financial account numbers, credit/debit card numbers, and government IDs. Additionally, protected health information such as health insurance information, medical provider names, dates of service, and billing information was exposed. A total of 409 individuals were affected, with 363 in Texas and 46 in Massachusetts.
As of May 5, 2026, attorneys are investigating potential class action lawsuits. Further details regarding state Attorney General filings or additional legal actions may emerge as the situation develops.