PAR Rehab (MI) reported to HHS on 2025-03-21 a Hacking/IT Incident affecting approximately 4,300 individuals. An employee was targeted by an email phishing scheme that compromised PHI including names, dates of birth, addresses, Social Security and driver's license numbers, claims and financial information, lab results, medications, and diagnoses/conditions. The CE notified HHS, individuals, and media, and enhanced email security and workforce training. OCR provided HIPAA technical assistance. Breached information was located in Email.
Affected (this filing): 4,300