Detroit residents are being urged to take precautions after a significant number of patient records from Oakland Physical Therapy &. Hand Rehabilitation clinics were discovered discarded along a Detroit road. The records contained sensitive personal information, including names, addresses, and insurance policy numbers, prompting concerns about potential identity theft.
The discovery was made earlier this week, and quickly drew the attention of security experts. Matt Loria, CEO of Auxiom, an IT security company, emphasized the importance of proactive measures. “It’s highly prudent that if you find out that your information has been exposed in any way, or there’s a slight risk of it, that you would do something to protect yourself,” Loria stated. While characterizing the incident as potentially lower-level due to the localized nature of the disposal, Loria cautioned that any compromise of personal data carries inherent risk.
Oakland Physical Therapy & Hand Rehabilitation operates multiple clinics throughout the Detroit metropolitan area, including locations in Southfield, Madison Heights, Warren, Garden City, Westland, and Detroit, according to the clinic’s website. The clinics offer a range of physical therapy services, specializing in areas such as neurological conditions, orthopedic issues, sports injuries, and hand rehabilitation.
Loria recommended utilizing identity protection services, such as LifeLock, which provide alerts regarding potential fraudulent activity, including credit card applications and the appearance of personal information on the dark web. However, he acknowledged that such services can be costly.
For individuals unable to afford paid protection, the Federal Trade Commission (FTC) offers a free credit report annually through annualcreditreport.com. Monitoring credit reports can help individuals identify unauthorized account openings or suspicious activity.
Local 4 News in Detroit has contacted the clinics’ attorney to determine the total number of records compromised and whether affected patients have been notified. As of Thursday, March 5, 2026, a response is still pending. The incident has already sparked concern among patients, with some expressing frustration and a loss of trust in the clinic, as reported on social media platforms like Facebook and Instagram.