TriMed Inc. Discloses Ransomware Attack Exposing Patient and Medical Data TriMed Inc., a California-based medical device company specializing in orthopedic implants, reported a data breach that may have compromised personal and medical information of certain individuals. The breach was discovered on January 23, 2026, following an investigation into suspicious activity detected in late 2025. The ransomware group LYNX claimed responsibility for the attack on October 2, 2025, posting on the Tor dark web network that it had exfiltrated data from the company. TriMed confirmed unauthorized access to files occurred between September 13 and September 21, 2025, though the full scope of the exposure was only determined months later. The exposed data included names, dates of birth, medical record numbers, and details about orthopedic implant parts such as device types, installation components, and ordering surgeon information. Notably, Social Security numbers, bank account details, and credit card data were not compromised. TriMed began notifying affected individuals on March 27, 2026, via written notices and a public statement on its website. The breach was also reported to the Maine Attorney General, with at least two Maine residents confirmed as impacted. In response, TriMed is offering affected individuals a complimentary 24-month membership to Experian IdentityWorks, including credit monitoring, identity restoration support, and $1 million in identity theft insurance. Enrollment is available until July 31, 2026, using a code provided in notification letters. A dedicated call center (844-558-4660) has been established for inquiries, operating through late June 2026. The incident highlights the ongoing risks of ransomware attacks targeting healthcare and medical device manufacturers, where sensitive patient data remains a high-value target.