Ivy Rehab, the parent company of two local physical therapy offices, has experienced a data breach that may have exposed patient information.
Ivy Rehab, which is based in White Plains, New York, owns the Spectrum Physical Therapy facilities on Pantops and Zion Crossroads.
According to a news release from the company, there’s no evidence of attempted or actual misuse of patient information, but the company is notifying patients who may have been affected by the incident.
The breach occurred in May when the company “found evidence” that a “limited number” of its employees’ email accounts may have been improperly accessed, the release says.
The release does not say where the employees worked.
The breach was part of a presumed phishing campaign, the release says.
The affected information could include patients’ first and last names in combination with one or more of the following attributes: protected health information, Social Security numbers, and financial account information, the release says.
Ivy Rehab is offering complimentary identity theft restoration and credit monitoring services through Equifax to help protect any impacted current or former patients for a certain period of time.
Patients who think their information may be at risk can call (833) 935-1376 from 9 a.m. to 9 p.m. Monday through Friday.