Silver Creek Fitness & Physical Therapy
ent_cb5d34aee3c4870365a81db9
Disclosures
2
HHS OCR · State AG · 1 jurisdiction
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
8,009
nationwide · HHS OCR CA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Silver Creek Fitness & Physical Therapy
- Normalized
- silver creek fitness physical therapy— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- CALIFORNIAHHS OCRas victim2016-10-24
Silver Creek Fitness & Physical Therapy reported to HHS on 2016-10-24 a Unauthorized Access/Disclosure affecting 8009 individuals. Breached information located on Network Server. A business associate (Rehab Billing Solutions) storage account was accessible externally from May 2016 to September 11, 2016, allowing a security researcher to download PHI including names, SSNs, Medicare numbers, and treatment records.
- California State AGas victim2016-10-24
Silver Creek Fitness & Physical Therapy notified patients of a data breach involving protected health information. A third-party billing and software vendor's Amazon S3 storage account was misconfigured, making it publicly accessible from May 1, 2016, to September 11, 2016. A security researcher accessed and downloaded data, including names, SSNs, Medicare numbers, and treatment notes, before the vulnerability was discovered and secured on September 11, 2016. The researcher deleted the data. The company offered credit monitoring via Equifax.
Supply-chain cascadesreviewed and confirmed
- Silver Creek Fitness & Physical Therapy’s filing is one of at least 3 in the Rehab Billing Solutions supply-chain incident (2016).