88,000 affected by Exeter firm's data breach
Sep. 17—More than 88,000 people tied to an Exeter business — including nearly 74,000 residents from New Hampshire — may have had their personal information compromised, including Social Security numbers and medical information.
Access Sports Medicine & Orthopaedics on Tuesday filed a breach notification dated Tuesday with the New Hampshire Department of Justice.
The company identified 73,976 New Hampshire residents who "may have been potentially impacted by this incident," the notification said.
A separate notification with the Maine Attorney General said a total of 88,044 people were affected, including 5,370 Maine residents, from a data breach the company called "hacking."
The breach happened May 10 and was discovered July 3.
Those affected were mailed letters.
"Access Sports is notifying impacted individuals and providing information and resources to help protect individuals' personal information," the company said on its website.
Name, date of birth, medical information, Social Security number, health insurance information and limited financial information may have been accessed, according to the company.
Access Sports said it had not received any reports of related identity theft since the May 10 breach.
The company statement said on that day it "detected suspicious activity in our network environment."
The company took steps to secure its network and hired a specialized cybersecurity firm. The company learned someone accessed certain files and data. On July 3 and July 19, Access Sports identified people whose personal health information was included.
"Since the discovery of the incident, Access Sports moved quickly to investigate, respond and confirm the security of our systems," the company said.
Access Sports is providing affected customers with credit monitoring services at no charge for at least a year.
