Select Medical Holdings Corporation

Select Medical Holdings Corporation based in Mechanicsburg, Pennsylvania, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-04-09 and reported on 2025-06-10. 54,345 Texas residents were affected. 175,350 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Medical Information. Consumers were notified via U.S. Mail.

Nationwide Recovery Services, Inc. (NRS), a debt collection service provider, experienced unauthorized access to its network between July 5 and July 11, 2024. NRS discovered suspicious activity on July 11, 2024, resulting in a network outage. Files containing customer information, including names, were copied from the systems. NRS secured its environment, launched an investigation, and reported the incident to law enforcement. Affected individuals are offered one year of credit monitoring and identity protection services.

Nationwide Recovery Services, Inc. (NRS), a debt collection provider, experienced unauthorized access to its network between July 5 and July 11, 2024. NRS discovered suspicious activity on July 11, 2024, leading to a network outage and the copying of files containing customer names. NRS reported the incident to law enforcement, engaged in an investigation, and implemented additional security measures. Affected individuals were offered one year of credit monitoring and identity protection services through IDX.

Select Medical Holdings Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-06-06. 1,489 Massachusetts residents were affected.

Select Medical Holdings Corporation (PA) reported to HHS on 2025-06-06 a Hacking/IT Incident affecting 119,525 individuals. The covered entity's business associate experienced a ransomware incident that encrypted PHI stored on a network server. Breached information included demographic and clinical (PHI) data. The CE notified HHS, affected individuals, and the media, posted substitute notice on its website, offered free credit monitoring, and terminated its contract with the BA.

Select Medical Holdings Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2024-07-05 and was reported on 2025-06-06. 166 Indiana residents were affected. 4,737 individuals affected in total.

Select Medical Holdings, Inc. notified the NH AG of a data breach at former vendor Nationwide Recovery Services (NRS). Unauthorized access occurred July 5-11, 2024, resulting in exfiltration of patient/guarantor PII (names, DOB, SSN, health info). NRS discovered the incident on July 11, 2024. Select notified 214 NH residents on June 6, 2025, offering credit monitoring.

SELECT MEDICAL HOLDINGS CORPORATION filed a data-breach notice with the Illinois Attorney General in June 2025 (case 25-06-222). The register records the breach as discovered on April 9, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.