On January 16, 2025, Mid South Rehab Services Inc. detected unauthorized access to two employee email accounts by a cybercriminal. The breach exposed sensitive personally identifiable information (PII) and protected health information (PHI), including names, Social Security numbers, dates of birth, medical records, and health data of current and former patients. While the exact number of affected individuals remains undisclosed, the incident poses significant risks of identity theft and fraud due to the exposure of highly sensitive data. The company secured the compromised accounts, engaged external cybersecurity experts for investigation, and notified federal law enforcement. Affected individuals are being informed via mail, and a dedicated support line has been established. The breach stems from a phishing-related compromise of employee credentials, leading to unauthorized access to confidential patient records. The exposure of SSNs and medical data elevates the severity, as such information is highly valuable for malicious activities like financial fraud or medical identity theft.