Upstream Rehabilitation Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Upstream RollCo, LLC, which does business as Upstream Rehabilitation, regarding its recent data breach. The Upstream Rehabilitation data breach involved sensitive personal identifiable information and protected health information belonging to an undetermined number of individuals


Upstream Rehabilitation is an outpatient physical therapy and rehabilitation provider. In fact, Upstream Rehabilitation holds itself out to be the largest dedicated outpatient physical therapy provider in the United States. Accordingly, Upstream Rehabilitation offers a complete range of physical therapy services, including outpatient rehabilitation, occupational therapy, managed healthcare services, sports medicine, and industrial services. Through its network of physical therapy and rehabilitation locations, Upstream Rehabilitation treats over 7 million patients annually. Headquartered in Birmingham, Alabama, Upstream Rehabilitation employes over 10,000 people through its family of brands, which includes over 1,200 physical and occupational therapy clinics in 28 states.


Recently, Upstream Rehabilitation discovered that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its systems may have been accessed. Through its investigation, Upstream Rehabilitation determined that an unauthorized actor may have accessed this sensitive information through employee email accounts between January 24 and 31, 2023 and again between February 3 and 9, 2023. On September 15, 2023, Upstream Rehabilitation began contacting individuals whose information may have been impacted. The type of information exposed includes:

  • Name
  • Social Security number
  • Driver’s license number
  • Date of birth
  • Financial information
  • Medical information
  • Health insurance information

If you received a breach notification letter from Upstream Rehabilitation:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the Upstream Rehabilitation data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in free credit monitoring service provided by Upstream RollCo, LLC d/b/a Upstream Rehabilitation;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: