Atique Orthodontics, P.A.

Atique Orthodontics, P.A. operates as a dental healthcare provider specializing in orthodontic services within the United States. Its core function involves diagnosing, preventing, and treating dental and facial irregularities, typically focusing on aligning teeth and jaws using appliances like braces or aligners. As a professional association (P.A.), it likely comprises licensed orthodontists providing patient care directly. The practice handles sensitive patient information integral to delivering healthcare services and processing payments or insurance claims.

In February 2016, Atique Orthodontics experienced a significant cybersecurity incident involving unauthorized access to an office computer. This breach occurred over a period of approximately one month and potentially compromised a server containing highly sensitive patient data. The compromised information included personally identifiable details such as Social Security numbers alongside financial information and insurance specifics. Following discovery of the incident, the practice took immediate action by terminating the remote access mechanism believed to be exploited and implementing additional technical safeguards to enhance security. Approximately 1,500 patients were affected by this data exposure.

The practice fulfilled its regulatory obligations by reporting the incident to relevant federal health authorities. Affected individuals were notified directly via mail communication detailing the nature of the breach and the specific types of their information involved. As a remedial measure, Atique Orthodontics offered complimentary identity theft protection services to these individuals, which included credit monitoring, identity recovery support, and an insurance policy. While the investigation found no evidence suggesting actual misuse of the compromised patient data at the time of notification, the incident underscored the risks associated with storing sensitive personal and financial information within healthcare practices. The response highlighted the practice's focus on compliance and patient support following the security failure.