A threat actor claims to have breached Albanese Physical Therapy, a physical therapy clinic based in Pennsylvania, United States. The actor is offering a dataset of allegedly stolen patient records for sale on a cybercrime forum.
According to the actor, the compromised 1GB+ dataset includes a wide range of sensitive patient information:
- First and last names
- Dates of birth
- Full addresses
- Phone numbers
- Email addresses
- Visit dates
- Medical treatment codes
- Insurance details
- Payment details
- Scanned PDF copies of MRI/CT reports
- Raw patient database files












