Silver Creek Fitness & Physical Therapy

Silver Creek Fitness & Physical Therapy reported a data breach involving a third-party billing and software provider's Amazon S3 storage account. The account was accessible to an external security researcher from May 1, 2016, to September 11, 2016. Affected data included names, SSNs, driver's license numbers, Medicare numbers, and PHI. The researcher downloaded the data but deleted it. The company provided credit monitoring via Equifax and notified regulators and HHS.