Performance Physical Therapy and Wellness
Disclosed Jul 21, 20179 years ago571 affectedConfirmed
The covered entity (CE), Performance Physical Therapy and Wellness, had a phishing incident which resulted in unauthorized access to employee email accounts, affecting the protected health information (PHI) of 571 individuals. The CE provided breach notification to HHS and affected individuals and offered free credit monitoring. Following the breach, the CE retrained employees, updated policies and procedures, implemented technical safeguards, and retained a third-party to investigate the incident and make prospective recommendations for its privacy and security. OCR obtained assurances that the CE implemented the corrective actions listed above.
What is known
| People affected | 571 (as reported to HHS) |
|---|---|
| Disclosed | Jul 21, 2017 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Performance Physical Therapy and Wellness (Healthcare Provider, CT)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jul 21, 2017 | 571 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.