norm: flex physical therapyno LEI · no CIKMax severity: High

Canonical registry

Flex Physical Therapy

ent_39f639cd2124dc5291f2ae47

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

3,100

as filed · HHS OCR WA

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Flex Physical Therapy
Normalized: flex physical therapy— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

WASHINGTONHHS OCRas victim2012-01-27
On 12/30/2011, three password-protected desktop computers were stolen from Flex Physical Therapy (WA) in a break-in. The ePHI potentially exposed included names, Social Security numbers, addresses, dates of birth, claims information, and diagnosis/treatment information of 3,100 individuals. The covered entity notified HHS, affected individuals, and the media, and provided substitute notice. Post-breach, the CE upgraded software and improved facility access controls. OCR provided technical assistance on encryption standards and breach notification.