Fyzical Therapy Parent Company Reports Major Data Breach Affecting 1,801 Texas Residents
Fyzical Acquisition Holdings, LLC, the parent company of FYZICAL Therapy & Balance Centers, disclosed a significant data breach exposing the personally identifiable information (PII) and protected health information (PHI) of at least 1,801 Texas residents. The incident was first detected on December 9, 2024, after unusual activity was observed in the company’s email environment.
An investigation revealed unauthorized access to email data, with evidence suggesting that sensitive information may have been viewed or copied by an outside party. A thorough review, completed on November 25, 2025, confirmed the exposure of highly sensitive data, including names, dates of birth, Social Security numbers, driver’s license or state ID numbers, financial account details, credit card information, health insurance data, and medical records.
Fyzical Acquisition Holdings reported the breach to the Texas Attorney General on December 22, 2025, and published a Notice of Data Security Incident on its website. In response, the company is offering free credit monitoring and identity protection services to affected individuals. Notifications are being sent to impacted parties, though the full scope of the breach’s consequences remains under assessment.
Source: https://www.claimdepot.com/data-breach/fyzical-therapy-balance-centers-2025
Fyzical cybersecurity rating report: https://www.rankiteo.com/company/fyzical
Fyzical cybersecurity rating report: https://www.rankiteo.com/company/fyzical
"id": "FYZFYZ1766441576",
"linkid": "fyzical, fyzical",
"type": "Breach",
"date": "12/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '1801',
'industry': 'Healthcare',
'location': 'Texas, USA',
'name': 'Fyzical Acquisition Holdings, LLC',
'type': 'Parent Company'}],
'attack_vector': 'Unauthorized email access',
'customer_advisories': 'Affected individuals are advised to monitor their '
'credit and identity protection.',
'data_breach': {'number_of_records_exposed': '1801',
'personally_identifiable_information': ['Names',
'Dates of birth',
'Social Security '
'numbers',
'Driver’s license or '
'state identification '
'numbers',
'Financial account '
'information',
'Credit card '
'information',
'Health insurance '
'information',
'Medical health '
'information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information (PII)',
'Protected health information '
'(PHI)']},
'date_detected': '2024-12-09',
'date_publicly_disclosed': '2025-12-22',
'description': 'Fyzical Acquisition Holdings, LLC, the parent company of '
'FYZICAL Therapy & Balance Centers, reported a significant '
'data breach compromising personally identifiable information '
'(PII) and protected health information (PHI) of at least '
'1,801 residents of Texas. Unauthorized access to certain '
'email data occurred, leading to the exposure of sensitive '
'information.',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': 'Email environment'},
'investigation_status': 'Completed',
'recommendations': 'Affected individuals are advised to monitor their credit '
'and identity protection. The company is offering credit '
'monitoring and identity protection services at no cost.',
'references': [{'source': 'Fyzical Acquisition Holdings Notice of Data '
'Security Incident'}],
'regulatory_compliance': {'regulatory_notifications': ['Texas Attorney '
'General']},
'response': {'communication_strategy': 'Notice of Data Security Incident '
'posted on website and disclosure to '
'Texas Attorney General',
'remediation_measures': 'Comprehensive review of compromised '
'data'},
'title': 'Fyzical Acquisition Holdings Data Breach',
'type': 'Data Breach'}