HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of April 16, 2025.
- Organization as reported
- Thrive Physical Therapy Partners, IL
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- April 16, 2025
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9342, row:481)
- Archived copy
- Held in the private archive (provenance)
Thrive Physical Therapy Partners, the business associate (BA) reported that an employee was the target of an email phishing scheme that compromised the protected health information (PHI) of 3,403 individuals. The PHI involved included demographic, clinical, and financial information. The BA notified HHS, impacted individuals, and the media. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards to better protect sensitive data. OCR provided technical assistance regarding the HIPAA Rules.