Choice Rehabilitation

Choice Rehabilitation, also known as MO Choice Rehabilitation, operates as a healthcare provider that delivers rehabilitation therapy services to patients. The organization focuses on providing therapeutic interventions aimed at improving patient outcomes. Its service offerings include various therapy modalities that are documented through patient billing and treatment records. The provider serves individuals seeking rehabilitative care within the United States, where its headquarters is located. Therapy service details, diagnoses, treatment codes, and care dates are among the data elements routinely handled in its clinical operations. By concentrating on rehabilitation, the organization addresses needs related to recovery and functional improvement. This specialization positions Choice Rehabilitation within the broader healthcare sector as a provider of therapy services.

Choice Rehabilitation maintains a network of affiliated facilities that support its service delivery across multiple locations. In November 2018, the organization experienced a security incident involving unauthorized access to a corporate email account. During that breach, an attacker forwarded emails containing patient billing information to an external destination before the activity was detected and contained. The compromised data encompassed patient names, medical record numbers, therapy service details, diagnoses, treatment codes, and care dates for over five hundred individuals. Notably, highly sensitive identifiers such as Social Security numbers and financial data were not exposed in the incident. After identifying the breach, the organization took immediate steps to secure the affected account and to prevent further unauthorized access. It then collaborated with its affiliated facilities to verify the scope of the exposure and to coordinate a unified response.

Following the discovery of the email account compromise, Choice Rehabilitation secured the affected account and initiated a notification process for the impacted individuals. The organization collaborated with its affiliated facilities to assess potential risks and to implement remedial measures. In response to the breach, it strengthened its security posture by introducing enhanced email security protocols. Additionally, the provider conducted additional employee training focused on security awareness and data protection. Ongoing monitoring of account activity was established to detect any anomalous behavior promptly. The provider evaluated the likelihood of financial or reputational harm to patients as low, given the limited nature of the exposed information. These actions reflect the organization's commitment to safeguarding patient information while continuing to deliver rehabilitation therapy services.