Orthopaedic Surgical Associates & Merrimack Valley Spine Center (“OSA”) were recently notified of a data breach impacting a third-party vendor, ConnectOnCall. OSA takes the protection of patient information seriously. Following notification of this incident, OSA terminated the partnership with ConnectOnCall. Patients will receive notification letters of the incident directly from ConnectOnCall. Patients may contact ConnectOnCall and learn more about the incident from the notification letter, or at the following web address: https://www.phreesia.com/security-incident/