Patient files were found dumped outside the DRC Physical Therapy Plus in Monticello, New York

The manila folders, dating back to at least 1998, include information sheets showing the names, addresses and birth dates of patients and, in some cases, Social Security numbers.

Assemblywoman Aileen Gunther, D-C-Forestburgh, whose mother-in-law used DRC to treat a wrist injury, said the company probably violated federal laws regarding patient privacy. She also said some state agency, perhaps the Department of Health, needs to take possession of the files and examine each one.

“Obviously, you don’t know if there was any breach of confidentiality,” she said. “You have to follow up, and probably all of those patients will have to be contacted.”

Probably violated the law? You dump documents that contain personal information on patients that includes social security numbers and you’re only probably sure? It doesn’t matter if no one actually used the files for criminal purposes, DRC Physical Therapy Plus violated the law by dumping them.