Rocky Mountain Orthodontics d/b/a Ortho America Holdings Data Breach Lawsuit Investigation
On October 9, 2025, Rocky Mountain Orthodontics d/b/a Ortho America Holdings (“RMO”) began notifying individuals of a data security incident that exposed sensitive personal information. Victims now face an elevated risk of identity theft and may be entitled to financial compensation. If you received a notice, contact our data-breach team today to discuss your rights and potential claims.
Download Official Breach Notice (PDF)Key Facts at a Glance
- Notice date: October 9, 2025
- Total individuals affected: 2
- Data exposed: Social Security numbers, driver’s-license numbers, medical information
- Free services offered: 24-month single-bureau credit monitoring, credit report & score, and fraud assistance through Cyberscout (TransUnion)
- Enrollment deadline: 90 days from the notice date
What Happened
According to the Massachusetts Attorney General filing, RMO experienced a data security incident that compromised certain company systems containing personal information. The organization completed an investigation and, on October 9, 2025, mailed written notices to the two Massachusetts residents whose information was involved.
What Information Was Involved
The breach included one or more of the following data elements:
- Social Security numbers
- Driver’s-license numbers
- Medical information
How Rocky Mountain Orthodontics Responded
RMO states that it has no evidence of misuse of the affected data. Nevertheless, the company is:
- Providing 24 months of single-bureau credit monitoring, credit report and credit score through Cyberscout, a TransUnion company
- Offering proactive fraud assistance and remediation support
Enrollment instructions and a unique activation code were included in each individual notice. Impacted recipients must enroll within 90 days at bfs.cyberscout.com/activate.
Recommended Steps for Affected Individuals
RMO’s letter outlines several actions you can take right now:
- Enroll in the complimentary credit-monitoring service using your unique code.
- Review bank, credit-card and insurance statements for unauthorized charges.
- Request your free annual credit reports at AnnualCreditReport.com or by calling 1-877-322-8228.
- Consider placing a fraud alert or security freeze with each major credit bureau:
Equifax 1-800-525-6285 | Experian 1-888-397-3742 | TransUnion 1-800-916-8800 - If you suspect identity theft, file a police report and retain a copy for your records; Massachusetts residents may obtain any report related to this incident.
- Learn more identity-theft prevention tips from the Federal Trade Commission or call 1-877-IDTHEFT.
Timeline of Events
- October 9, 2025 – Incident reported to the Massachusetts Attorney General; consumer notices mailed.
- October 10, 2025 – Last update to the state filing.
Company Overview
Rocky Mountain Orthodontics, operating as Ortho America Holdings, manufactures and distributes orthodontic devices and equipment worldwide.
- Website: rmortho.com
- Headquarters: 650 W Colfax Ave, Denver, Colorado, United States
- Year founded: 1933
- Industry: Medical Devices & Equipment
- Employees: 101 – 250
Frequently Asked Questions
Why did I receive a Rocky Mountain Orthodontics data breach letter?
You were sent a notice because RMO’s investigation determined that your personal information was present in the systems involved in the incident.
What personal data was exposed in the Rocky Mountain Orthodontics breach?
The company reports that Social Security numbers, driver’s-license numbers and medical information were potentially compromised.
Is RMO offering free credit monitoring?
Yes. Affected individuals can enroll in 24-month single-bureau credit monitoring, credit reports, credit scores and fraud assistance through Cyberscout at no cost.
How many people were impacted by the Rocky Mountain Orthodontics breach?
The Massachusetts filing lists 2 affected residents. No other state filings are available at this time.
Do I need a lawyer to pursue a Rocky Mountain Orthodontics data breach lawsuit?
Legal representation is not mandatory, but consulting an attorney experienced in data-privacy litigation can help you understand potential claims for monetary relief.