Restorix Health Data Breach Exposes PHI - 38,553 People Affected

On or around May 30, 2024, Restorix Health, Inc. ("Restorix") learned that an unauthorized actor had gained access to an employee's email account. Upon discovering this unauthorized access, Restorix immediately secured the compromised account and launched a thorough investigation with assistance from external cybersecurity experts.

The investigation revealed that the unauthorized actor had access to the employee's email account between May 7, 2024, and May 29, 2024. After an extensive forensic review and manual document analysis, Restorix determined on November 27, 2024, that the compromised email account contained personal and protected health information of individuals affiliated with Restorix's healthcare partners. The company notified its healthcare partners about the incident on December 18, 2024.

The data breach affected approximately 38,553 individuals in the United States. The types of information exposed varied by individual and may have included:

• First and last names
• Dates of birth
• Driver's license numbers
• Government identification numbers
• Passport numbers
• Social Security numbers
• Patient ID numbers
• Medical information
• Prescription information
• Dates of medical service
• Medical conditions, treatments, or diagnoses
• Certificate and/or license numbers
• Health insurance information

Restorix has provided official notification letters to affected individuals beginning on February 14, 2025. Individuals who did not receive a notification but believe they might be affected can contact Restorix at 1-833-799-4480 for confirmation.

Restorix Health, Inc.'s response

Restorix acted promptly to address the data breach by immediately securing the compromised email account and launching a detailed investigation with cybersecurity experts. The company has also taken additional steps to strengthen its cybersecurity posture, including:

• Implementing enhanced cybersecurity safeguards
• Improving employee cybersecurity training
• Revising cybersecurity policies, procedures, and protocols to prevent similar incidents in the future

Restorix has provided resources to help affected individuals protect themselves from potential identity theft or fraud. The company recommends that affected individuals remain vigilant by reviewing their account statements, explanation of benefits forms, and monitoring their free annual credit reports for suspicious activity. Individuals can request their free annual credit reports at AnnualCreditReport.com.

Affected individuals may also consider placing a fraud alert or a security freeze on their credit files. Information on how to place fraud alerts and security freezes can be found by contacting the three major credit bureaus directly:

• Equifax Fraud Alerts
• Experian Fraud Alerts
• TransUnion Fraud Alerts

Restorix has established a dedicated response line for individuals seeking more information or assistance regarding the incident. Individuals can contact this response line at 1-833-799-4480, available Monday through Friday, 8:00 AM to 8:00 PM Eastern Time.

For additional details, Restorix has posted a Notice of Security Incident on its website. The breach has also been reported to the U.S. Department of Health and Human Services.

About Restorix Health, Inc.

Restorix Health, Inc. is a healthcare services company founded in 1997 and headquartered in Tarrytown, New York. The company specializes in wound care management, partnering with hospitals and healthcare facilities across the United States to develop and manage outpatient wound centers.

Restorix provides comprehensive wound care solutions, including wound management, amputation prevention, hyperbaric medicine, patient education, and supplies. The company serves hospitals, health systems, nursing homes, managed care organizations, healthcare providers, and patients.

RestorixHealth is known for its data-driven approach and reports impressive patient outcomes, including a 95.5% healing rate, 98.4% patient satisfaction, and a median healing time of 28 days. Recently, in April 2024, Restorix announced a strategic partnership with Accurate Healthcare to expand its services within the nursing industry.

For more information about Restorix Health, Inc., visit the company's website at restorixhealth.com.