Innovative Therapy Concepts Company CyberSecurity Posture

itcmgt.net
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

ITC was founded in 2006 by Joe Sapp, Physical Therapist, to create a business model unmatched by other therapy providers. After practicing as a clinician for over a decade, he recognized that organizations were not giving the necessary autonomy to therapists. This trend was true across all settings. ITC was born to create an environment that cares for and rewards therapists by providing: •Autonomous environments in which to practice •The right tools for documentation and treatment •CEU opportunities unmatched by other organizations •Professional growth opportunities •Career advancement ITC’s core principles of promoting the best and highest patient outcomes has led to an establishment of a new standard of therapeutic experience for our patients, our teams, our customers and the communities we serve. ITC is therapist owned and truly therapist driven!

Innovative Therapy Concepts A.I CyberSecurity Scoring

ITC

Company Details

Linkedin ID:

innovative-therapy-concepts

Website:

http://www.itcmgt.net

Employees number:

145

Number of followers:

639

NAICS:

62

Industry Type:

Hospitals and Health Care

Homepage:

itcmgt.net

IP Addresses:

Scan still pending

Company ID:

INN_1843705

Scan Status:

In-progress

AI scoreITC Risk Score (AI oriented)

Between 650 and 699

https://images.rankiteo.com/companyimages/innovative-therapy-concepts.jpeg
ITC Hospitals and Health Care
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreITC Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/innovative-therapy-concepts.jpeg
ITC Hospitals and Health Care
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Innovative Therapy Concepts

Weak
Current Score
693
B (Weak)
01000
1 incidents
-77.0 avg impact

Incident timeline with MITRE ATT&CK tactics, techniques, and mitigations.

DECEMBER 2025
693
NOVEMBER 2025
692
OCTOBER 2025
692
SEPTEMBER 2025
690
AUGUST 2025
689
JULY 2025
688
JUNE 2025
763
Breach
25 Jun 2025 • Innovative Physical Therapy
Data Breach at Innovative Physical Therapy via Third-Party Vendor

On **August 25, 2025**, Innovative Physical Therapy discovered a **data breach** originating from a third-party vendor providing practice management services. The incident stemmed from two vendor employees falling victim to a **phishing scam**, exposing their email credentials between **June 25–26, 2025**. This unauthorized access led to the compromise of **personally identifiable information (PII)** and **protected health information (PHI)**—including **names, dates of birth, Social Security numbers, phone numbers, medical records, and health insurance details**—of at least **2,023 individuals**. The breach poses severe risks, such as **identity theft, insurance fraud, and financial exploitation**, given the sensitivity of the exposed data. Innovative Physical Therapy reported the incident to the **U.S. Department of Health and Human Services (HHS)** on **October 2, 2025**, and issued consumer notices. The vendor secured the affected accounts, launched a forensic investigation, and began notifying impacted individuals, offering **credit monitoring and identity protection services**. The breach underscores vulnerabilities in third-party vendor security and the critical need for robust phishing defenses in healthcare data handling.

686
critical -77
INN3702637112025
Incident Details -
Type
Data Breach (Phishing)
Attack Vector
Phishing (Email Credential Theft)
Vulnerability Exploited
Human Error (Phishing Susceptibility)
Impact
Personally Identifiable Information (PII) Protected Health Information (PHI) Names Dates of Birth Phone Numbers Social Security Numbers Medical Information Health Insurance Details Vendor Email Accounts Brand Reputation Impact: Potential Reputation Damage (Identity Theft/Insurance Fraud Risk) Identity Theft Risk: High
Response
Forensic Investigation Firm Secured Affected Email Accounts Engaged Third-Party Forensic Investigation Reviewed Affected Patients and Compromised Data Issued Notification Letters to Affected Individuals Offered Complimentary Credit Monitoring & Identity Protection Services Posted Consumer Notice on Website Notified U.S. Department of Health and Human Services (HHS) Established Dedicated Helpline (855-291-2518)
Data Breach
PII (Personally Identifiable Information) PHI (Protected Health Information) Number Of Records Exposed: 2,023 Sensitivity Of Data: High (Includes SSNs, Medical & Insurance Data) Data Exfiltration: Likely (Unauthorized Access to Email Accounts) Emails (Potentially Attachments with Sensitive Data) Names Dates of Birth Phone Numbers Social Security Numbers Medical Information Health Insurance Details
Regulatory Compliance
HIPAA (Health Insurance Portability and Accountability Act) U.S. Department of Health and Human Services (HHS)
Recommendations
Review notices from Innovative Physical Therapy or its vendors Sign up for complimentary credit monitoring and identity protection Monitor financial accounts and credit reports for identity theft Consider fraud alerts or credit freezes with major credit bureaus Be cautious of unsolicited emails/phone calls requesting personal information
Investigation Status
Ongoing (Third-Party Forensic Investigation Engaged)
Customer Advisories
Dedicated helpline: 855-291-2518 (Mon-Fri, 8:00 a.m. - 8:00 p.m. CT) Credit monitoring and identity protection services offered
Initial Access Broker
Entry Point: Phishing Emails (Vendor Employee Credentials) Email Accounts with PII/PHI
Post Incident Analysis
Human Error (Phishing Susceptibility) Inadequate Email Security Controls
References
Blog URL Source URL
MAY 2025
763
APRIL 2025
763
MARCH 2025
763
FEBRUARY 2025
763
JANUARY 2025
763

Frequently Asked Questions

According to Rankiteo, the current A.I.-based Cyber Score for Innovative Therapy Concepts is 693, which corresponds to a Weak rating.

According to Rankiteo, the A.I. Rankiteo Cyber Score for November 2025 was 692.

According to Rankiteo, the A.I. Rankiteo Cyber Score for October 2025 was 692.

According to Rankiteo, the A.I. Rankiteo Cyber Score for September 2025 was 690.

According to Rankiteo, the A.I. Rankiteo Cyber Score for August 2025 was 689.

According to Rankiteo, the A.I. Rankiteo Cyber Score for July 2025 was 688.

According to Rankiteo, the A.I. Rankiteo Cyber Score for June 2025 was 763.

According to Rankiteo, the A.I. Rankiteo Cyber Score for May 2025 was 763.

According to Rankiteo, the A.I. Rankiteo Cyber Score for April 2025 was 763.

According to Rankiteo, the A.I. Rankiteo Cyber Score for March 2025 was 763.

According to Rankiteo, the A.I. Rankiteo Cyber Score for February 2025 was 763.

According to Rankiteo, the A.I. Rankiteo Cyber Score for January 2025 was 763.

Over the past 12 months, the average per-incident point impact on Innovative Therapy Concepts’s A.I Rankiteo Cyber Score has been -77.0 points.

You can access Innovative Therapy Concepts’s cyber incident details on Rankiteo by visiting the following link: https://www.rankiteo.com/company/innovative-therapy-concepts.

You can find the summary of the A.I Rankiteo Risk Scoring methodology on Rankiteo by visiting the following link: Rankiteo Algorithm.

You can view Innovative Therapy Concepts’s profile page on Rankiteo by visiting the following link: https://www.rankiteo.com/company/innovative-therapy-concepts.

With scores of 18.5/20 from OpenAI ChatGPT, 20/20 from Mistral AI, and 17/20 from Claude AI, the A.I. Rankiteo Risk Scoring methodology is validated as a market leader.