Clarkston Chiropractic Sports & Wellness Data Breach 2025: 2,757 Affected · Hacking/IT Incident · MI. Filed With HHS OCR. What To Do.

Clarkston Chiropractic Sports & Wellness, a chiropractic and sports-medicine clinic based in Clarkston, Michigan, filed a HIPAA breach notification with the U.S. Department of Health and Human Services Office for Civil Rights on June 11, 2025, reporting 2,757 affected individuals in a Hacking/IT Incident at a Network Server. The federal portal entry is, as of this writing, the authoritative public record of the incident. Two plaintiff firms have since opened class-action investigations, but no class complaint has been reported filed and the entity has not published a substitute notice on its public website.

Timeline

• June 11, 2025 — Clarkston Chiropractic Sports & Wellness reports the breach to the HHS Office for Civil Rights. The portal entry lists the entity as a Healthcare Provider, the event type as a Hacking/IT Incident, and the location of the breached information as a Network Server. Affected count: 2,757.
• July 1, 2025 — Strauss Borrelli PLLC publishes a class-action investigation page soliciting impacted individuals.
• July 2025 — Markovits, Stock & DeMarco, LLC opens a parallel class-action investigation.
• As of May 2026 — The OCR investigation remains in the federal portal as a recent reported breach. Specific data elements exposed, attacker attribution, the dates of unauthorized access, and any individual notification-letter mailing date have not been publicly disclosed.

What was exposed

The HHS OCR portal entry classifies the event as a Hacking/IT Incident at a Network Server but does not enumerate the specific data fields exposed. The investigating plaintiff firms describe the incident as one in which “sensitive protected health information” in the clinic’s systems may have been accessed, without listing categories such as Social Security numbers, dates of birth, treatment information, or insurance identifiers. As a chiropractic provider, the clinic’s records ordinarily include patient demographics, contact details, insurance information, and clinical treatment notes; until the entity publishes a substitute notice or a sample notification letter is filed with a state attorney general, the specific elements affected here remain undisclosed.

What Clarkston Chiropractic Sports & Wellness is offering affected patients

The clinic has not published a public substitute notice, and the OCR portal entry does not indicate what remediation (credit monitoring, identity-theft protection, call-center support) is being offered to affected patients. Strauss Borrelli’s investigation page notes the general expectation that affected individuals “may soon” receive notification letters but does not confirm a remediation package. Patients who receive an individual notification letter should read it carefully for any complimentary credit-monitoring or identity-theft-protection enrollment code and the deadline to activate it.

Class-action exposure

As of this update, two plaintiff firms have opened public investigations: Strauss Borrelli PLLC and Markovits, Stock & DeMarco, LLC. Neither firm has reported filing a class complaint. With a covered population of roughly 2,757 individuals and no public attribution of specific high-sensitivity data fields (such as SSNs), the litigation calculus here is more constrained than in larger breaches; we will update this page if a complaint is filed in federal or Michigan state court.

What to do if you may be affected

• Freeze your credit with the three nationwide consumer reporting agencies (Equifax, Experian, TransUnion). A security freeze is free, takes about ten minutes per bureau, and is the single highest-leverage protective step against identity theft.
• Watch for a notification letter at the address on file with Clarkston Chiropractic Sports & Wellness. Notification letters typically follow the OCR filing by several weeks to a few months. Read carefully for the specific data elements affected and any free credit-monitoring offered, with its enrollment deadline.
• Save the letter. If a class action is later filed, you will need the notification letter to document your standing as a class member.
• Watch for targeted phishing. Patients of a small clinic make plausible targets for phone calls and emails impersonating the practice or its insurer. Treat unexpected outreach asking for SSNs, payment details, or login credentials as suspicious.

Sources on this page

• HHS Office for Civil Rights Breach Portal — the federal regulatory record of this breach.
• Strauss Borrelli PLLC — Clarkston Chiropractic Sports & Wellness Data Breach Investigation
• Markovits, Stock & DeMarco, LLC — Clarkston Chiropractic Sports & Wellness Data Breach Class Action Investigation
• Clarkston Chiropractic Sports & Wellness — official site