Western Orthopaedics Breach

Summary:
Western Orthopaedics, P.C. (Denver, Colorado) was listed by the PEAR ransomware group around Sep 30, 2025, with third-party trackers confirming the claim on Oct 4. The company has not posted a public notice as of today. External write-ups describe data-exfiltration (not proven encryption) and reference PHI.

Key Facts

• Entity: Western Orthopaedics, P.C. (brand: Western Orthopaedics)
• Domain: western-ortho.com
• Sector & Location: Healthcare - Colorado, USA
• Type/Vector: Ransomware & data exfiltration (claimed by PEAR)
• Status: Claimed (unconfirmed) - no regulator or company notice located yet.
• Timeline: Estimated incident Sep 30, 2025; listing observed Oct 4, 2025
• Impact: External blogs speculate on totals (e.g., “108k+ patients”), but these figures are unverified. Our parse at databreach.com revealed 135,300 home addresses, 66,600 SSNs, 37,700 emails & 193,000 phones.
• Threat Actor: PEAR (aka “Pure Extraction And Ransom”) - active since mid-2025.
• Company Response: No public breach notice on the site and no listing on OCR as of this writing.

Context & Details
PEAR’s listing for Western Orthopaedics appears on group trackers with an attack date of Sep 30, 2025 and discovery on Oct 4, 2025. Independent posts summarizing the leak page describe it as data-leak exfiltration with no ransom amount disclosed in visible materials. Until the company or a regulator confirms, treat all specifics from the threat-actor page as allegations.

Risk / What It Means
SSNs & home addresses raise identity-theft risk; emails & phones increase targeted phishing/social-engineering risk; any clinical records would elevate medical-fraud risk.

What Affected People Can Do
Consider credit freezes or fraud alerts; watch EOBs/claims for irregularities; be cautious with calls, texts, and emails referencing orthopedic care.