Cyber Incident

Casper Orthopedic Associates, PC, Notifies Individuals of Data Security Incident

Casper Orthopedic Associates, PC (“Casper”), is notifying individuals whose information may have been involved in a cybersecurity incident. 

On or about May 23, 2026, Casper discovered it was the victim of a cyberattack by an unauthorized third party. Immediately upon identifying the incident, Casper engaged third-party cybersecurity experts to assess, contain, and remediate the incident. Law enforcement was also notified. 

Casper’s investigation, which concluded on June 11, 2026, determined that the unauthorized party may have acquired sensitive information from Casper’s systems. Casper then undertook an in-depth review process of the impacted information to determine the impacted individuals and their address information, which was completed on September 2, 2026. As such, Casper notified those who are believed to be impacted on September 8, 2026.  

Although Casper has found no evidence that information in its care has been specifically misused, the following information was potentially exposed to an unauthorized third party: first name, last name, date of birth, driver’s license number, Social Security number, financial account information, and medical information. Notably, the types of information affected were different for each individual, and not every individual had all the above listed elements exposed. 

As a precautionary measure, individuals should promptly report any fraudulent activity or suspected identity theft to proper law enforcement authorities, including the police and their state’s attorney general. This notification was not delayed due to a law enforcement investigation. Affected individuals may also wish to review the tips provided by the Federal Trade Commission (“FTC”) on fraud alerts, security/credit freezes, and steps that they can take to avoid identity theft.   For more information and to contact the FTC, individuals can visit www.ftc.gov/idtheft or call 1-877-ID-THEFT (1-877-438-4338).  Affected individuals may also contact the FTC at Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580. 

Contact information for the three national credit reporting agencies is as follows:

The security and privacy of the information contained within its systems is a top priority for Casper. In response to this incident, Casper implemented additional safeguards and improved its physical security related to cybersecurity. Further, Casper continues working to improve its cybersecurity policies, procedures, and protocols to help minimize the likelihood of this type of incident from occurring again. 

For individuals seeking more information or questions about this incident, please call 1-877-344-1660, Monday through Friday, 8:00 a.m. and 8:00 p.m. ET, excluding holidays. 

Casper values the security of the personal data it maintains, and understands the frustration, concern, and inconvenience that this incident may have caused. We look forward to continuing to provide high quality care to the Casper community.