HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Encompass Health Corporation
bd_750c1b27be22c104 · schema v1 · pii pii-v1
Full breach record for Encompass Health Corporation →Encompass Care Inc. reported a cybersecurity incident to the Maryland Attorney General involving one Maryland resident. An unauthorized third party gained access to a management company's computer systems between September 17, 2024, and October 3, 2024. The accessed documents contained personal information including names, dates of birth, Social Security numbers, financial account numbers, and medical/insurance information. Encompass Care engaged forensic investigators, notified law enforcement, and offered credit monitoring services to the affected individual.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376177.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2025
- Raw hash
- 1300e2722f66ee024655900e95c1c713f0dee1793fa285c307d54da5525c644c
Reporting entity
- Name
- Polsinelli PCnorm: polsinelli
Victim entity
- Name
- Encompass Health Corporationnorm: encompass health
- Domain
- encompasshealth.com
Incident
- Discovered
- Oct 3, 2024
- Materiality determined
- —
- Notification sent
- Jan 9, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maryland Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 months(406 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.