Healthcare Therapy Services
Disclosed Nov 7, 202516,857 affectedConfirmed
Health Therapy Services, the covered entity CE), reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 15,027 individuals. The PHI included clinical, financial and demographic information. The CE notified HHS, the affected individuals, the media and posted substitute notice on its website. In its mitigation efforts, the CE implemented additional technical, administrative and security safeguards, updated its HIPAA policies and procedures, and retrained staff.
What is known
| People affected | 16,857 (as reported by the organization) |
|---|---|
| Disclosed | Nov 7, 2025 |
| Happened | Apr 22, 2025 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.