Ransomware victim disclosure
← All victimsComprehensive Orthopaedics and Musculoskeletal Care, LLC
Claimed by crypto24 · listed 2 months ago
Status timeline
- Listed
Mar 9, 2026
- Data leaked
At a glance
- Group
- crypto24
- Status
- Data leaked
- Country
- United States
- Sector
- Healthcare
- Listed on leak site
- Mar 9, 2026
About the victim
AI dossier — public-source company profileComprehensive Orthopaedics and Musculoskeletal Care, LLC is a multi-location orthopaedic surgery and sports medicine practice based in Connecticut, with offices in Wallingford, Meriden, Southington, and Cheshire. The practice is staffed by board-certified orthopaedic surgeons and physical therapists specialising in knee, hip, shoulder, spine, foot, hand, and sports-related injuries. Services include surgical and non-surgical treatment, urgent orthopaedic walk-in care, physical therapy, pain management, and MRI/imaging.
- Industry
- Orthopaedic & Musculoskeletal Healthcare
- Address
- Wallingford, Meriden, Southington, and Cheshire, Connecticut, United States
Attack summary
Severity: critical — The group claims exfiltration of HIPAA-regulated protected health information (PHI) for over 100,000 patients at a medical practice, meeting the threshold for critical severity due to confirmed large-scale exfiltration of regulated medical/PII data, and the data is reported as published.The ransomware group crypto24 claims to have exfiltrated HIPAA-protected personal information belonging to over 100,000 individuals from Comprehensive Orthopaedics and Musculoskeletal Care, LLC, with the data described as published (disclosed status: data_published).
Data the group says was taken
AI dossier — extracted from the leak post- HIPAA-protected personal information
- Patient health records
- Personally identifiable information (PII) for 100,000+ individuals
What the group claims
HIPAA personal information for over 100,000 people...
Sources
- Victim sitecomprehensiveorthopaedics.com
Source
Indexed 2 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
