Ivy Rehab Physical Therapy

Ivy Rehab Physical Therapy has reported a data security breach and offering free credit monitoring to concerned patients.

The company discovered some employee email accounts has been compromised, the accounts may have contained information about current and former patients.

There were no evidence of any attempted or actual misuse of any patient information.

The accessed email accounts contained patient information about some of our current and former patients including patients’ first and last names in combination with one or more of the following attributes: protected health information, Social Security numbers, and financial account information.

Ivy took data privacy and security very seriously and actively took steps to guard against something like this from happening again.

Source: https://www.databreaches.net/ivyrehab-reports-data-security-breach-after-employee-email-accounts-compromised/

TPRM report: https://scoringcyber.rankiteo.com/company/ivy-rehab

"id": "ivy65127423",
"linkid": "ivy-rehab",
"type": "Breach",
"date": "11/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Ivy Rehab Physical Therapy',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Email Account Compromise',
 'customer_advisories': ['Offering free credit monitoring to concerned '
                         'patients'],
 'data_breach': {'personally_identifiable_information': ['First and Last Names',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Patient Information',
                                              'Protected Health Information',
                                              'Social Security Numbers',
                                              'Financial Account Information']},
 'description': 'Ivy Rehab Physical Therapy reported a data security breach '
                'involving compromised employee email accounts that may have '
                'contained patient information.',
 'impact': {'data_compromised': ['Patient Information',
                                 'Protected Health Information',
                                 'Social Security Numbers',
                                 'Financial Account Information']},
 'post_incident_analysis': {'corrective_actions': ['Taking steps to guard '
                                                   'against future incidents']},
 'response': {'communication_strategy': ['Offering free credit monitoring to '
                                         'concerned patients']},
 'title': 'Data Security Breach at Ivy Rehab Physical Therapy',
 'type': 'Data Breach'}