Golden State Orthopedics & Spine Data Breach Investigation

Golden State Orthopedics & Spine, a multispecialty orthopedic and spine practice with dozens of locations across Northern California, has confirmed that patient information was exposed in a network security incident earlier this year. Contact our data breach lawyers to learn more.

What happened at GSOS?

According to a notice the practice posted on its website August 27, 2026, Golder State Orthopedics discovered unusual activity within its systems on or around July 2, 2026. The practice says it secured its network and hired outside forensic investigators to determine what happened and which patient files were affected.

A day before that discovery, a ransomware group calling itself Brain Cipher reportedly claimed on a dark web forum that it had pulled 150 gigabytes of data from the organization and threatened to release it within about a week. GSOS has not independently confirmed the group's specific claims in its public notice.

The investigation found that a limited number of patients may have had the following information accessed:

• Full name
• Home address
• Date of birth
• Social Security number
• Health insurance details
• Medical diagnosis information

Not every patient's file contained all of these data points, and the exact scope may vary by individual. Golden State says it has no evidence the information has actually been misused, but it is encouraging patients to monitor their accounts and consider a credit freeze or fraud alert.

For patients, that reassurance only goes so far. Social Security numbers and medical diagnosis records do not expire, and healthcare data breaches routinely lead to identity theft, medical fraud and tax fraud that surface months or years later.

The Lyon Firm represents patients across the country in data breach and privacy litigation against healthcare providers who fail to properly safeguard sensitive medical records.

Our attorneys are reviewing whether GSOS took reasonable steps to protect patient data before this incident occurred, and whether affected patients may have grounds to pursue compensation for the exposure of their personal and medical information.

If you received a notice from Golden State Orthopedics & Spine, or believe your information may have been involved, contact The Lyon Firm today for a free, confidential case review. There is no obligation and no fee unless we recover on your behalf.