Cyberattack on Northeast Orthopedics & Sports Medicine: Ransomware Threat

Incident Date:

May 8, 2024

World map



Cyberattack on Northeast Orthopedics & Sports Medicine: Ransomware Threat


Northeast Orthopedics and Sports Medicine




Airmont, USA

New York, USA

First Reported

May 8, 2024

Ransomware Attack on Northeast Orthopedics & Sports Medicine

Victim Company Profile

Northeast Orthopedics and Sports Medicine (NEOSM) is a premier orthopedic practice serving the New York and northern New Jersey regions. The company's registered name is Northeast Orthopedics and Sports Medicine, PLLC. NEOSM is known for its patient-centric approach and expert orthopedic care. The practice offers full-service orthopedics, with physicians providing complete care for all orthopedic conditions.

Company Details

NEOSM operates in the Healthcare Services sector and specializes in providing orthopedic care and treatment for a variety of musculoskeletal conditions, including sports injuries, joint pain, fractures, and more. They offer services such as physical therapy, surgical procedures, and non-surgical treatments to help patients recover and improve their quality of life. NEOSM provides personalized care and treatment plans tailored to each individual's needs.

Ransomware Attack Details

Northeast Orthopedics & Sports Medicine fell victim to a cybercrime attack by the ransomware group dAn0n. The attack involved ransomware, with the attacker exfiltrating a significant amount of data totaling 1.56 terabytes from the victim's website, This attack poses significant risks to the privacy and security of sensitive medical information, highlighting the importance of robust cybersecurity measures in healthcare organizations.

Threat Actor Profile

dAn0n is a new ransomware gang that published the data of 8 victims on its leak site in April. The group distinguishes itself by targeting organizations and exfiltrating large amounts of data. The specific method through which dAn0n penetrated Northeast Orthopedics & Sports Medicine's systems is currently unknown.


Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.