Encompass Health Corporation

Encompass Care Inc. reported a cybersecurity incident to the Maryland Attorney General involving one Maryland resident. An unauthorized third party gained access to a management company's computer systems between September 17, 2024, and October 3, 2024. The accessed documents contained personal information including names, dates of birth, Social Security numbers, financial account numbers, and medical/insurance information. Encompass Care engaged forensic investigators, notified law enforcement, and offered credit monitoring services to the affected individual.

Encompass Care Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-09-17 and was reported on 2025-01-08. 6 Indiana residents were affected. 1,988 individuals affected in total.

Encompass Health Corporation filed an 8-K on Feb 27, 2024, reporting a cybersecurity incident involving Change Healthcare, a third-party payment claims intermediary. Encompass severed connections and conducted forensic searches but found no unauthorized access to its own systems. The incident has not affected patient care, though claim submission delays may occur. Encompass does not currently consider the incident material.