Spine Diagnostic & Pain Treatment

Profile narrative

Spine Diagnostic and Pain Treatment is a medical practice that focuses on the evaluation and management of spinal conditions through diagnostic imaging and interventional pain‑therapy procedures. The organisation provides services aimed at identifying sources of spinal discomfort and delivering targeted treatments to alleviate pain for patients suffering from back‑related ailments. Its core activities are conducted within an outpatient setting, serving individuals who require specialised spinal care in the United States. The practice operates under the alias Spine Diagnostic and Pain Treatment, reflecting its clinical emphasis on both diagnostic assessment and pain relief.

The organisation came to public attention in February 2022 when a ransomware attack attributed to the Conti group resulted in the exfiltration and leakage of approximately 3,351 patient files. These files represented roughly 30 % of the total data that was taken during the incident, and they included sensitive information such as driver’s licence images, pain diagrams, insurance billing details, and other personally identifiable and protected health data. Although the provider did not issue a public confirmation of the breach at the time, the leaked materials bore the practice’s letterhead, linking the compromised records directly to the organisation.

As a handler of protected health information, Spine Diagnostic and Pain Treatment is subject to federal privacy regulations governing the safeguarding of patient data, notably the Health Insurance Portability and Accountability Act. The breach highlighted the types of clinical documentation the practice maintains, including diagnostic reports and treatment plans that are integral to its spine‑focused services. No explicit details about the organisation’s ownership, parent‑company relationships, or overall size are available in the supplied sources, so those aspects are not described here. The profile is confined to the confirmed facts regarding the organisation’s purpose, the nature of the reported incident, and its regulatory context concerning patient information.

Incidents

1 incident linked to this organisation.