Restorix Health Data Breach Exposes PHI Affecting 38,553 People

On or around May 30, 2024, Restorix Health, Inc. ("Restorix") learned that an unauthorized actor had gained access to an employee's email account.

Upon discovering this unauthorized access, Restorix secured the compromised account and launched a thorough investigation with assistance from external cybersecurity experts. The investigation revealed that the unauthorized actor had access to the employee's email account between May 7, 2024, and May 29, 2024.

After an extensive forensic review and manual document analysis, Restorix determined on November 27, 2024, that the compromised email account contained personal and protected health information of individuals affiliated with Restorix's healthcare partners.

The company notified its healthcare partners about the incident on December 18, 2024.

The data breach affected approximately 38,553 individuals in the United States, including 510 residents of Rhode Island. Restorix has posted a notice of the incident on its website.

The types of information exposed varied by individual and may have included:

• First and last names
• Dates of birth
• Driver's license numbers
• Government identification numbers
• Passport numbers
• Social Security numbers
• Patient ID numbers
• Medical information
• Prescription information
• Dates of medical service
• Medical conditions, treatments, or diagnoses
• Certificate and/or license numbers
• Health insurance information

Restorix Health's response

Restorix has mailed notification letters to affected individuals beginning on February 14, 2025. Individuals who did not receive a notification but believe they might be affected can contact Restorix at 1-833-799-4480 for confirmation.

Restorix has provided resources to help affected individuals protect themselves from potential identity theft or fraud. The company recommends that affected individuals remain vigilant by reviewing their account statements, explanation of benefits forms, and monitoring their free annual credit reports for suspicious activity.

Restorix has established a dedicated response line for individuals seeking more information or assistance regarding the incident. Individuals can contact this response line at 1-833-799-4480, available Monday through Friday, 8:00 AM to 8:00 PM Eastern Time.