Lakeshore Bone & Joint Institute

Lakeshore Bone & Joint Institute is a healthcare organization based in the United States, operating under a name that indicates a specialization in orthopedics and musculoskeletal care. The institute provides medical services to patients, as evidenced by the handling of sensitive patient data including treatment details, diagnoses, medical record numbers, and insurance information. Its operational scope involves the direct care of individuals, managing their personal health information within a clinical setting. The specific range of services, such as surgical procedures, rehabilitation, or primary care, is not detailed in the available information, but the nature of the compromised data confirms its role as a provider of specialized medical treatment.

A significant event in the organization's recent history was a data security incident that occurred on July 7, 2021. This incident involved the unauthorized access to an employee's Microsoft Office 365 email account, leading to the compromise of protected health information for 23,627 individuals. The exposed data was extensive, including dates of birth, treatment details, diagnoses, provider names, medical record numbers, insurance information, treatment costs, and for some individuals, their Social Security numbers. In response to this breach affecting a substantial number of patients, the institute secured the compromised account and engaged cybersecurity experts to investigate the incident and implement measures to mitigate further risk. As part of its remediation for those whose Social Security numbers were exposed, the organization offered 12 months of complimentary identity theft monitoring services. This incident highlights the critical data security challenges faced by healthcare entities handling large volumes of sensitive personal and medical information.