Select Medical Holdings Data Breach

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the data breach affecting Select Medical.

As part of their investigation, they need to hear from individuals who received a notice stating they were impacted.

Select Medical Holdings has informed patients about a data security incident impacting its former vendor, Nationwide Recovery Services, Inc. The Nationwide Recovery Services data breach was detected on July 11, 2024, after suspicious activity led to a network outage. The vendor, a debt collector, secured its systems, launched an investigation, and involved law enforcement. Unauthorized access was determined to have occurred between July 5 and July 11, 2024, with files copied from the systems. A review of these files was completed by February 3, 2025, and a list of affected patients was provided to Select Medical on April 9, 2025. 

Patient data potentially accessed in the data breach impacting Select Medical included names, dates of birth, addresses, provider names, dates of service, patient account numbers, and, in some cases, Social Security numbers. Information related to certain guarantors, including names and Social Security numbers, was also involved. 

Select Medical, a nationwide provider of critical illness recovery hospitals, inpatient rehabilitation hospitals, and outpatient rehabilitation centers, mailed notification letters to affected individuals by June 6, 2025.

If your information was exposed in the data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force Select Medical to ensure it takes proper steps to protect the information it was entrusted with.