Notice of Security Incident

What Happened? On the morning of December 30, 2024, a Pacific Rehabilitation Centers employee received a ransomware notice on their computer. Our IT staff immediately initiated security measures and took our servers offline to protect stored data. A forensic investigation is ongoing, and while we have confirmed that data on our servers has been encrypted, we have not yet confirmed any unauthorized access or exportation of data.

What Information Was Involved? The affected records that have been encrypted and remain inaccessible include personal information of our patients, employees, and individual contractors, including names, addresses, diagnosis and treatment information, social security numbers, health plan numbers, banking information for direct deposit, dates of birth, e-mail addresses, driver’s license numbers, citizenship status, passport numbers, dependent personal information, and electronic signatures.

What Are We Doing to Mitigate This Incident? Our servers remain offline for forensic analysis. We transitioned to secure alternative systems within 24 hours to ensure uninterrupted patient care. Enhanced security measures have been implemented on all company devices. Our executive team is meeting daily with forensic IT personnel and is leading the transition to an upgraded electronic health records system.

What Can You Do? The Federal Trade Commission (FTC) recommends placing a free fraud alert on your credit file. Contact any one of the three major credit bureaus to place a fraud alert or credit freeze:

• Equifax: equifax.com/personal/credit-report-services or 1-800-685-1111
• Experian: experian.com/help or 1-888-397-3742
• TransUnion: transunion.com/credit-help or 1-888-909-8872

You can also request a free credit report from each bureau to check for unauthorized accounts or inquiries. Report any suspicious activity to the FTC at IdentityTheft.gov.

Questions? For additional questions, contact our Incident Hotline at 206-635-4401, 9 am – 1 pm, Pacific Time. We will provide follow-up notices if new relevant information is obtained.

We regret any concern or inconvenience this may cause and remain committed to improving the lives and well-being of our patients.