Date: 11/28/25

Dear Patient:

We are writing to inform you of a data security incident involving patient information stored on an electronic medical record system previously used by our practice. The practice has been closed for approximately 10 months, and this system was not in active use.

On October 10, 2025, we discovered that the server had been encrypted by ransomware. Although there is no evidence that your information has been misused, unauthorized access cannot be ruled out. The information involved may include your name and address stored in our medical records. No Social Security numbers or financial data were stored.

The data breach was secondary to a customer data breach involving a firewall. Our systems have been secured, and steps have been taken to prevent future incidents. If you have questions, please contact us at 401-383-7753

Sincerely,

Jack Goldstein, MD

Sports Medicine and Orthopedics