Case Overview

| | |

|---|---|

| Case Type | Data Breach Class Action Settlement |

| Defendant | Concord Orthopaedics Professional Association |

| Jurisdiction | New Hampshire |

| Status | Settlement Reached |

| Vertical | Privacy, Data & TCPA |

Concord Orthopaedics Data Breach Settlement: What Affected Patients Need to Know

A New Hampshire orthopedic and rheumatology practice has agreed to settle a consolidated class action lawsuit stemming from a data breach that allegedly exposed patients' personal and medical information. If you received care from Concord Orthopaedics Professional Association and were notified of the breach, you may be running out of time to file a claim.

According to a recent report from the HIPAA Journal, Concord Orthopaedics Professional Association — a comprehensive orthopedic and rheumatology provider based in New Hampshire — has reached a settlement to resolve consolidated class action litigation related to the breach. Here is what the available reporting indicates.

1. Concord Orthopaedics Data Breach Class Action Settlement

Defendant: Concord Orthopaedics Professional Association

Case Type: Healthcare Data Breach

Status: Settlement reached; court approval pending

Who May Qualify: Current and former patients of Concord Orthopaedics Professional Association who received notice that their personal information may have been compromised in the data breach.

Concord Orthopaedics Professional Association is a New Hampshire-based provider offering orthopedic and rheumatology care services. The consolidated class action lawsuit alleges that a data breach exposed patients' sensitive personal and medical information. Healthcare data breaches are of particular concern given the sensitive nature of the records involved — which in medical settings can include names, dates of birth, Social Security numbers, insurance information, and protected health information.

The lawsuit was consolidated, meaning multiple related legal filings were combined into a single proceeding, which courts often do when numerous plaintiffs allege similar harms from the same incident.

Settlement terms, including the total fund size, individual payout ranges, and claim filing deadline, had not been fully detailed in early reporting. Affected individuals should monitor official settlement communications and any class notice they may have received by mail or email for specific instructions on how to file a claim.

How to stay informed: Watch for official correspondence from the settlement administrator, and check back as additional details about the claim process become available.

Key Takeaways

• Healthcare data breaches carry elevated risk — Medical records can contain Social Security numbers, insurance data, and treatment histories, making them among the most sensitive categories of personal information.
• Consolidated lawsuits indicate broad impact — When courts consolidate multiple class action filings into one case, it typically signals that a significant number of individuals alleged similar harms.
• Check your mail and email — If you were a patient of Concord Orthopaedics and were affected by the breach, you may have already received a class notice with instructions on how to participate in the settlement.
• Settlement approval is not guaranteed — Proposed settlements in class actions must receive court approval before any payments are distributed to class members.
• No proof of actual misuse is typically required — In many data breach settlements, class members may be eligible to file a claim based on notification of exposure alone, though requirements vary by case.

This article is based on reporting from the HIPAA Journal, published April 9, 2026. Settlement details, deadlines, and eligibility criteria are subject to change as the case progresses through court. This article is for informational purposes only and does not constitute legal advice. Readers with questions about their eligibility or legal options should consult a qualified attorney.

Are you a former patient of Concord Orthopaedics who was notified of this breach? Share your experience in the comments below.