Orthopaedic Specialists of Massachusetts Data Breach Exposes Sensitive Patient and Employee Information Orthopaedic Specialists of Massachusetts (OSM), a healthcare provider with locations in Norwood and Milton, Massachusetts, and partnerships with multiple state hospitals, disclosed a data breach involving unauthorized access to sensitive patient and employee information. The breach was first detected on January 15, 2026, after suspicious network activity was identified. An investigation revealed that an unauthorized actor may have copied data between January 12 and January 15, 2026. The compromised information varies by individual but may include names, addresses, phone numbers, dates of birth, Social Security numbers, patient identification numbers, medical account details, medical records, and health insurance information. OSM has begun notifying affected individuals by mail. The incident has prompted legal scrutiny, with attorneys exploring potential class action lawsuits on behalf of those impacted. The breach underscores ongoing risks to healthcare data security, particularly for organizations handling highly sensitive personal and medical records.