Notice of Security Incident

Tennessee Orthopaedic Clinics (“TOC”) is committed to protecting the security and privacy of the information we maintain. We recently responded to and addressed a security incident that disrupted the operations of some of our IT systems.

We initially identified the incident when we experienced unusual activity on our systems, and we immediately took steps to secure our systems and launched an investigation with the assistance of a third-party forensic investigator. The investigation determined that an unauthorized party accessed some of our systems between March 20, 2023, and March 24, 2023, and may have accessed or acquired certain files.

On May 2, 2023, through our ongoing analysis, we determined that certain files that may have been involved in the incident contained information belonging to some TOC patients. The information varies per patient but could have included some or all of the following for the patients involved: names, contact information, dates of birth, diagnosis and treatment information, provider names, dates of service, cost of services, prescription information, and/or health insurance information. After our review and analysis of the files is complete, we will be providing notification to the patients whose information may have been involved via U.S. First Class Mail.

For patients whose information may have been involved in the incident, we recommend that they review the statements they receive from their healthcare providers and contact the relevant provider immediately if they see services they did not receive.

We take this incident very seriously and sincerely regret any concern this may cause. To help prevent something like this from happening again, we have implemented additional safeguards and technical security measures to further protect and monitor our systems. If you have questions about this incident, please contact: Questions@tocdocs.com