Pacific Rehabilitation Data Breach
The 2024 Pacific Rehabilitation Centers data breach was a ransomware incident that encrypted files on the organization's servers. An employee found a ransom notice on a computer on the morning of December 30, 2024, and the IT team took servers offline to begin its response.
This scope reflects unique email identifiers supplied to help notify malware victims; it does not establish an individual-victim or user total.
Review Device and Account Security
Check whether your email identifier appears in this malware exposure
Check my emailExposed Data Types
2 sensitive10- Medical information
- Health insurance information
- Names
- Physical addresses
- Dates of birth
- Email addresses
- Social security numbers
- Driver's licenses
- Government issued IDs
- Financial account information
About This Record
Pacific Rehabilitation Centers, legally UNITED BACKCARE PS, was a Washington health-care provider offering physical therapy, pain management and return-to-work programs.
When did the breach occur?
The official notice says the ransomware incident was identified on December 30, 2024. The organization confirmed that server data had been encrypted but, at the time of notice, had not confirmed unauthorized access to or export of the files.
What information may have been affected?
The encrypted records contained patient, employee and contractor information, including names, addresses, dates of birth, email addresses, Social Security numbers, driver's-license or passport information, citizenship status, diagnosis and treatment information, health-plan numbers, direct-deposit banking information, dependent information and electronic signatures. The categories varied by person.
How many people were affected?
The U.S. Department of Health and Human Services breach record reports 18,900 affected individuals.
What did the organization do?
Pacific Rehabilitation Centers said it kept servers offline for forensic analysis and moved to secure alternative systems within 24 hours to maintain patient care. It also implemented additional security measures on company devices and began moving to an upgraded electronic health-record system.
What should affected people do?
Notice recipients should review credit reports, bank accounts and health-insurance statements for unfamiliar activity. People whose Social Security or financial information was involved may also wish to consider a fraud alert or credit freeze.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
