HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 21, 2017.
- Organization as reported
- Performance Physical Therapy and Wellness, CT
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- July 21, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14117, row:5256)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Performance Physical Therapy and Wellness, had a phishing incident which resulted in unauthorized access to employee email accounts, affecting the protected health information (PHI) of 571 individuals. The CE provided breach notification to HHS and affected individuals and offered free credit monitoring. Following the breach, the CE retrained employees, updated policies and procedures, implemented technical safeguards, and retained a third-party to investigate the incident and make prospective recommendations for its privacy and security. OCR obtained assurances that the CE implemented the corrective actions listed above.