Data Privacy Incident

Notice Regarding a Data Privacy Incident

Sarasota Health and Rehab is committed to protecting the privacy and security of our patients’ information. We are providing this notice to inform individuals of a recent incident that may have involved some of their personal health information.

What Happened

On May 18, 2026, we discovered that an unauthorized individual had gained access to an employee email account containing patient information. We immediately began an investigation, auditing activity from May 14 through May 22, 2026, with remediation completed through June 1, 2026, and took steps to secure our systems. At this time, there is no evidence that any information has been misused.

What Information May Have Been Involved

The information involved may have included name, date of birth, Social Security number, census lists, Notice of Medicare Noncoverage (NOMNC) notices, DNR/guardianship documents, clinical orders, and Medicaid/Medicare records.

What We Are Doing

We have secured the affected account and reset credentials, removed the malicious email across our environment, and strengthened our email and account security to help prevent a similar incident. We have also provided additional staff training and are completing the reporting to the U.S. Department of Health and Human Services (HHS) required by law.

What You Can Do

While we have no indication of misuse, we recommend you review your medical statements, monitor your accounts, and report any suspicious activity to your insurer or our office. We are offering complimentary credit monitoring and identity theft protection for 24 months to affected individuals.

How to Find Out If You Were Affected

Because we were unable to reach some individuals directly by mail, we are posting this notice. If you would like to find out whether your information was involved, or have any questions, please contact our Privacy Officer, Stephen J. Redman, at 727-366-8442, Monday through Friday. This line will remain available through [replace dateĀ  with 90 days from posting date]. You may also reach us by email at sredman@theconsultss.com.