Every public data breach

53 disclosed this week · 26,385 on record

Healthcare Therapy Services

Disclosed Nov 7, 202516,857 affectedConfirmed

Official notice

Health Therapy Services, the covered entity CE), reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 15,027 individuals. The PHI included clinical, financial and demographic information. The CE notified HHS, the affected individuals, the media and posted substitute notice on its website. In its mitigation efforts, the CE implemented additional technical, administrative and security safeguards, updated its HIPAA policies and procedures, and retrained staff.

What is known

People affected16,857 (as reported by the organization)
DisclosedNov 7, 2025
HappenedApr 22, 2025
AttackHacking
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
attack2026-09-25
unknown to hackingby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
summary2026-09-25
empty to Health Therapy Services, the covered entity CE), reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 15,027 individuals. The PHI included clinical, financial and demogby backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Healthcare Therapy Services