Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Rocky Mountain Orthodontics d/b/a Ortho America Holdings Data Breach

This file collects the dated facts on record for the Rocky Mountain Orthodontics d/b/a Ortho America Holdings incident. The state report is dated October 9, 2025.

Timeline

October 9, 2025Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state: Massachusetts
Date reported: October 9, 2025
Receiving office: Massachusetts Attorney General

Case notes

Rocky Mountain Orthodontics, operating under the name Ortho America Holdings, officially notified regulators in Massachusetts about a data security incident on October 9, 2025. Public filings indicate that an investigation into the nature and scope of this incident is currently underway.

As a provider of orthodontic and dental health services, Ortho America Holdings manages extensive patient care networks and clinical operations. While the specific method of the breach, such as a cyberattack or unauthorized access, has not been detailed in public records, such incidents typically compromise digital repositories. The information involved remains unspecified in the current public disclosure.

The exposure of personal information, even when its exact nature is not specified, can present various risks to affected individuals. These potential risks include identity theft, fraud, and unauthorized use of one's personal details. The full implications often become clearer as investigations progress.

Individuals who receive a formal notification letter from Ortho America Holdings should carefully review all provided information and follow any specific instructions. It is broadly recommended to remain vigilant for any unusual activity across personal accounts and to consider placing a fraud alert or security freeze on credit reports as a precautionary measure.

Monitoring personal statements, updating account passwords, and exercising caution with unexpected communications are important general safeguards. Report any suspicious financial activity or unusual requests for personal details to the appropriate authorities and financial institutions.

Questions about this case file

Where does the Rocky Mountain Orthodontics d/b/a Ortho America Holdings case file come from?: Every entry is taken from the breach report Rocky Mountain Orthodontics d/b/a Ortho America Holdings lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Massachusetts data breaches

Named in the Rocky Mountain Orthodontics d/b/a Ortho America Holdings breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Massachusetts case files