Breaches and incidents

Center for Bone and Joint Surgery of the Palm Beaches (Florida): compromised website forms exposed 5,461 patients

Per HIPAA Journal, the practice told HHS OCR that PHI of 5,461 people was involved after suspicious activity was found on its website on 27 Jul 2026.

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • Per HIPAA Journal, the practice told HHS OCR that PHI of 5,461 people was involved after suspicious activity was found on its website on 27 Jul 2026; “certain forms on its website may have been compromised”, exposing names, contact details and appointment request information.
  • Root cause: website forms compromised; how is not disclosed. The practice said the investigation “found no proof that patient data was obtained or misused.”
  • No attacker named.
  • The affected forms were removed and security strengthened, per the practice as reported.