On August 2, 2024, PRM Management Company, Inc. d/b/a Pelvic Rehabilitation Medicine (“Pelvic Rehabilitation Medicine”) filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights after discovering that an unauthorized party gained access to an employee email account. In this notice, Pelvic Rehabilitation Medicine explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information. Upon completing its investigation, Pelvic Rehabilitation Medicine began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from PRM Management Company, Inc. or Pelvic Rehabilitation Medicine it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Pelvic Rehabilitation Medicine data breach. For more information, please see our recent piece on the topic here.

What Caused the Pelvic Rehabilitation Medicine Data Breach?

The Pelvic Rehabilitation Medicine data breach was only recently announced, and more information is expected in the near future. However, Pelvic Rehabilitation Medicine’s filing with the U.S. Department of Health and Human Services Office for Civil Rights provides some important information on what led up to the breach. PRM Management also posted a website notice describing the incident.

According to these sources, in June 2024, Pelvic Rehabilitation Medicine detected suspicious activity within its email environment. In response, PRM Management secured its system and then launched an investigation with the help of data security experts.

Through this investigation, PRM Management confirmed that an unauthorized party gained access to an employee’s email account between January 30, 2024 and June 5, 2024, during which they were able to access confidential patient information.

After learning that sensitive consumer data was accessible to an unauthorized party, Pelvic Rehabilitation Medicine reviewed the compromised files to determine what information was leaked and which consumers were impacted. PRM Management is still in the process of conducting this review. However, once complete, Pelvic Rehabilitation Medicine will be sending out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

While the PRM Management data breach letter doesn’t specify what data types were compromised, the data breach letter notes that “If an individual’s Social Security number was affected, credit monitoring and identity restoration services would be provided at no cost,” which may be an indication that some patients’ SSNs were affected.

More Information About PRM Management Company, Inc.

PRM Management Company, Inc. is a healthcare services provider based out of New York City, New York. PRM Management developed a proprietary, patented, office-based procedure to treat the symptoms of chronic abdominal pelvic pain. This treatment consists of a series of pelvic nerve and muscle treatments to target inflammation in the pelvis, nerve pain, and pelvic floor muscle spasms. Pelvic Rehabilitation Medicine employs more than 73 people and generates approximately $9 million in annual revenue.