SI-Bone, Inc., a medical device company specializing in minimally invasive treatments for sacropelvic conditions (notably SI joint pain), experienced a data breach discovered on October 1, 2025. The incident exposed highly sensitive personal and medical information, including names, Social Security numbers, driver’s license numbers, addresses, medical records, health insurance details, and other confidential data. The breach was reported to the Texas Attorney General, suggesting a multi-state impact. A law firm, Edelson Lechtzin LLP, is investigating a potential class-action lawsuit on behalf of affected individuals, citing risks of identity theft, fraud, and unauthorized use of compromised data. The exposure of such critical information poses severe threats to patient privacy, financial security, and trust in the company’s data protection measures. Victims are advised to monitor financial accounts and credit reports for suspicious activity, indicating the breach’s potential for long-term harm.

SI-Bone, Inc., a medical device company specializing in minimally invasive surgical solutions for sacropelvic disorders, experienced a significant data breach in October 2025. The incident exposed personal and protected health information (PHI) of potentially thousands of patients, including at least 955 individuals in Texas. Compromised data included names, addresses, Social Security numbers, driver’s license numbers, medical records, and health insurance details.The breach was disclosed to the Texas Attorney General’s office, and affected individuals were notified via print media. The exposure of such sensitive data poses severe risks, including identity theft, financial fraud, and unauthorized medical record access. Patients were advised to enroll in credit monitoring, place fraud alerts, and seek legal recourse. A class action lawsuit is being investigated by Shamis & Gentile P.A. to pursue compensation for victims.Given the nature of the exposed data—highly sensitive PHI and personally identifiable information (PII)—the breach has profound implications for patient privacy, trust in the company, and potential regulatory penalties under laws like HIPAA. The long-term impact may include reputational damage, financial liabilities, and operational disruptions for SI-Bone.