Rehabilitation Support Services

Rehabilitation Support Services reported to HHS on 2025-08-21 a Hacking/IT Incident affecting 1,237 individuals. Breached information located on Network Server. A business associate was the subject of a cyber-attack affecting PHI including clinical and demographic information.

Rehabilitation Support Services, Inc. (RSS) detected suspicious network activity on June 1, 2021. Unauthorized actors exfiltrated files, which were later published on a dark web site. On August 5, 2021, RSS confirmed that personal information and protected health information (including SSNs, names, addresses, DOBs, and medical diagnoses) of affected individuals were in the stolen files. One New Hampshire resident was notified via mail starting September 8, 2021, and offered credit monitoring. RSS engaged cybersecurity experts and notified the FBI.

Rehabilitation Support Services, Inc. reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred on May 31, 2021. The breach was discovered on August 5, 2021. The incident affected 3 Maine residents, and a total of 23,907 individuals. The compromised information included names and financial account numbers or credit/debit card numbers with their corresponding access codes. The company began notifying affected individuals on September 8, 2021, and offered identity theft protection services through Equifax.

Rehabilitation Support Services, Inc. (NY) reported to HHS OCR on 2021-09-10 a ransomware attack on its network server affecting 23,907 individuals. Exposed PHI included names, addresses, dates of birth, Social Security numbers, financial and health insurance information, medication information, diagnoses, and lab results. The CE notified HHS, affected individuals, and the media, posted a substitute notice on its website, and responded by implementing additional administrative/technical safeguards and retraining employees.

Rehabilitation Support Services, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-09-10. 17 Massachusetts residents were affected. The report records the breach type as electronic.

REHABILITATION SUPPORT SERVICES, INC. filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-366). The register records the breach as discovered on June 1, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.