Terros Health

Terros Health is a healthcare organization headquartered in the United States of America. It operates at least one clinic in the Phoenix, Arizona area where it provides medical services to patients. As a handler of protected health information, the organization is subject to HIPAA regulations and maintains systems for managing patient data. Its core function involves delivering care to individuals seeking medical attention within its service area.

In November 2017, Terros Health experienced a phishing incident that compromised an employee email account, potentially exposing the protected health information of approximately 1,600 patients. The breach primarily affected individuals treated at its Phoenix clinic, with most exposed data consisting of names and birthdates, while a subset of 1,241 patients had additional details such as physical and email addresses, diagnoses, and medical record numbers revealed. Social Security numbers for 142 of those patients were also at risk, prompting the organization to offer credit monitoring and identity theft protection to those individuals.

Following the incident, Terros Health notified affected parties via mailed letters and established a dedicated call center to address inquiries, demonstrating a structured breach response process. The organization’s handling of the event reflects its role as a covered entity that must comply with federal breach notification requirements. While specific details about its broader service portfolio or organizational size are not disclosed in the available sources, the incident indicates that it manages health information for a patient base numbering in the thousands.