The covered entity (CE), Best Health Physical Therapy, reported that it experienced a hacking attack that compromised the protected health information (PHI) of 3,764 individuals. The PHI affected included names, dates of birth, drivers’ license numbers, and medical information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE offered complimentary credit monitoring and identity protection services and implemented additional technical safeguards.