Date of Breach
Allegation
Institution Type
Number Impacted
According to dark web monitoring sources, Spear Physical Therapy (a/k/a Spear Center, or “Spear”), a chain physical therapy provider in New York City and the tristate area, may have experienced a data breach allegedly carried out by the threat group known as Brain Cipher. Our firm is investigating this incident and would like to speak with current and former patients of Spear Physical Therapy.
On or around November 4, 2026, dark web monitoring websites including Ransomware.live detected that the cybercriminal threat group known as Brain Cipher claimed to have breached data from Spear in a post made to the threat group’s dark web leak site. Brain Cipher claims to have stolen forty gigabytes (40 GB) of files consisting of patient information and company internal information, including health records, government ID scans, and other personal and/or protected health information.
As of November 4, 2026, Spear has not confirmed the alleged breach’s authenticity. Details of the alleged breach, such the full scope of potentially affected information and the number of potentially affected individuals, remain under investigation.
While Spear has not confirmed the alleged breach nor its associated details, based on the nature of ransom attacks on healthcare practices and claims made by the Brain Cipher group, the categories of information that may have been compromised may include:
Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you are a current or former patient of Spear Physical Therapy, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.
Spear Physical Therapy, headquartered in New York, New York, is a Healthcare provider that specializes in outpatient physical therapy and rehabilitation services.
UNDER THE RULES OF CERTAIN JURISDICTIONS, THIS WEBSITE MAY CONSTITUTE ATTORNEY ADVERTISING.
