Leidos QTC Health Commercial Services Suffers Major Data Breach in August 2025 In August 2025, Leidos QTC Health Commercial Services, operating as First Rehabilitation Resources (FRR)—a provider of independent medical examinations and health services—detected suspicious activity within its email system. The company swiftly responded by taking the affected system offline, suspending related IT services, and migrating users to a new, more secure email platform. The breach, disclosed to the Massachusetts Attorney General on December 30, 2025, exposed highly sensitive data, including names, dates of birth, Social Security numbers, driver’s license numbers, government IDs, and medical or health insurance information. The incident compromised both personally identifiable information (PII) and protected health information (PHI), classifying it as a severe security failure. Cybersecurity experts were engaged to contain the breach, ensuring the unauthorized party no longer had access to FRR’s systems. To mitigate the impact, FRR is offering affected individuals 24 months of complimentary credit monitoring and identity protection services through Epiq—Privacy Solutions ID. The package includes three-bureau credit monitoring, VantageScore tracking, Social Security number monitoring, dark web surveillance, and up to $1 million in identity theft insurance. The company has also provided guidance for reviewing accounts, placing fraud alerts, and enrolling in the offered services.