Western Orthopaedics, P.C. - Notice of Security Incident Western Orthopaedics, P.C. ("Western Ortho") values and respects the privacy of patient information. We are posting this notice on our website to inform certain individuals of a security incident that affected our network and may have involved some of their personal information, including protected health information. This notice contains information about what happened, the measures taken in response, and services we are making available to help protect your information. On October 2, 2025, Western Ortho became aware of a potential security incident. Upon becoming aware of the issue, we took immediate steps to investigate, contain, and remediate the incident with the assistance of our contracted cybersecurity team and external cybersecurity experts. Based on the investigation, Western Ortho determined that, as part of the security incident, between approximately September 17, 2025 and September 25, 2025, an unauthorized third party accessed and/or acquired certain data contained within our network. As part of our investigation and response, we conducted an analysis to determine whether personal information, including protected health information, was present in the affected data. That analysis concluded on March 3, 2026, at which time we determined that certain individuals' information may have been involved in this incident. Our review determined that the data affected may have included protected health information, including: full name and address; phone number; Social Security number; date of birth; and/or protected health information, including health insurance information, health insurance plan or subscriber identification number, medical provider name, medical dates of service, and medical cost or billing information. Please note, not all data elements were present for every individual. Upon discovering the incident, Western Ortho took immediate steps to contain the event and confirm the security of our network environment. Although we have no indication of identity theft or fraud in relation to this event, to help relieve concerns and restore confidence following this incident, we have arranged for affected individuals to enroll in complimentary credit monitoring and identity protection services, at no cost, through Epiq. Individuals who may be affected should review the information below for further steps to protect their information, including recommendations from the Federal Trade Commission regarding identity theft protection and details on how to place a fraud alert or security freeze on your credit file. It is also recommended that you remain vigilant for incidents of fraud and identity theft by reviewing your account statements and monitoring your credit reports for unauthorized activity. If you discover any suspicious or unusual activity on your accounts, promptly notify the financial institution or company with which your account is maintained. Although we have no information to date indicating that your health information has been or will be used for any unintended purposes, as a general matter, the following practices can help protect you from medical identity theft: Only share your health insurance cards with your health care providers and other family members who are covered under your insurance plan or who help with your medical care. Review your Explanation of Benefits ("EOB") statements from your health insurance company and follow up with your insurance company or care provider for any items you do not recognize. If necessary, contact the care provider listed on the EOB and ask for copies of medical records from the time frame of the incident (noted above) to the current date. Ask your insurance company for a current year-to-date report of all services paid for you as a beneficiary and follow up with your insurance company or care provider for any items you do not recognize. To determine whether your information may have been involved in this incident, or for further information and assistance, please call our dedicated toll-free incident response line at 855-815-3938 between 8:00 a.m. and 8:00 p.m. Central Time, Monday through Friday. This toll-free number will remain active for at least 90 days from the date of this posting. Your Team at Western Orthopaedics IPL0337478 May 6 2026