Commitments and Contingencies

6 Months Ended

Jun. 30, 2024

Commitments and Contingencies Disclosure [Abstract]

Commitments and Contingencies

Commitments and Contingencies

Litigation

The Company is a party to various legal actions, proceedings, and claims, and regulatory and other governmental audits and investigations in the ordinary course of its business, including, but not limited to, legal actions and claims alleging professional malpractice, general liability for property damage, personal and bodily injury, violations of federal and state employment laws, often in the form of wage and hour class action lawsuits, and liability for data breaches. Many of these actions involve large claims and significant defense costs and sometimes, as in the case of wage and hour class actions, are not covered by insurance. The Company cannot predict the ultimate outcome of pending litigation, proceedings, and regulatory and other governmental audits and investigations. These matters could potentially subject the Company to sanctions, damages, recoupments, fines, and other penalties.

To address claims arising out of the Company’s operations, the Company maintains professional malpractice liability insurance and general liability insurance coverages through a number of different programs that are dependent upon such factors as the state where the Company is operating. The Company currently maintains insurance coverages under a combination of policies with a total annual aggregate limit of up to $29.0 million for professional malpractice liability insurance and $29.0 million for general liability insurance. The Company’s insurance for the professional liability coverage is written on a “claims-made” basis, and its commercial general liability coverage is maintained on an “occurrence” basis. These coverages apply after a self-insured retention limit is exceeded. Each of these programs has either a deductible or self-insured retention limit. The Company also maintains additional types of liability insurance covering claims which, due to their nature or amount, are not covered by or not fully covered by the applicable professional malpractice and general liability insurance policies, including workers compensation, property and casualty, directors and officers, cyber liability, and employment practices liability insurance coverages. Our insurance policies generally are silent with respect to punitive damages so coverage is available to the extent insurable under the law of any applicable jurisdiction, and are subject to various deductibles and policy limits. The Company reviews its insurance program annually and may make adjustments to the amount of insurance coverage and self-insured retentions in future years. Significant legal actions, as well as the cost and possible lack of available insurance, could subject the Company to substantial uninsured liabilities.

Physical Therapy Billing. On October 7, 2021, Select received a letter from a Trial Attorney at the U.S. Department of Justice, Civil Division, Commercial Litigation Branch, Fraud Section (“DOJ”) stating that the DOJ, in conjunction with the U.S. Department of Health and Human Services (“HHS”), is investigating Select in connection with potential violations of the False Claims Act, 31 U.S.C. § 3729, et seq. The letter specified that the investigation relates to Select’s billing for physical therapy services, and indicated that the DOJ would be requesting certain records from Select. In October and December 2021, the DOJ requested, and Select furnished, records relating to six of Select’s outpatient therapy clinics in Florida. In 2022 and 2023, the DOJ requested certain data relating to all of Select’s outpatient therapy clinics nationwide, and sought information about the Company’s ability to produce additional data relating to the physical therapy services furnished by Select’s outpatient therapy clinics and the Company. The Company has produced data and other documents requested by the DOJ and is fully cooperating on this investigation. In May 2024, by order of the U.S. District Court for the Middle District of Florida, a qui tam lawsuit that is related to the DOJ’s investigation was unsealed after the U.S. filed a notice declining to intervene in the case, but stating that its investigation is continuing and reserving its right to intervene at a later date. The lawsuit, filed in May 2021 and amended in October 2021 and July 2024, was brought by Kathleen Kane, a physical therapist formerly employed in Select’s outpatient division, against Select Medical Corporation, Select Physical Therapy Holdings, Inc. and Select Employment Services, Inc. The amended complaint alleges that the defendants billed federally funded health programs for one-on-one therapy services when group therapy was performed or overbilled for one-on-one therapy services, and billed for

unreimbursable unskilled physical therapy services. At this time, the Company is unable to predict the timing and outcome of this matter.

California Department of Insurance Investigation. On February 5, 2024, the Company received a subpoena from the California Department of Insurance relating to an investigation under the California Insurance Frauds Prevention Act, Cal. Ins. Code § 1871.7 et seq., which allows a whistleblower to file a false claims lawsuit based on the submission of false or fraudulent claims to insurance companies. The subpoena seeks documentation relating mainly to the Company’s billing and coding for physical therapy claims submitted to commercial insurers and workers compensation carriers located or doing business in California. The Company has produced data and other documents requested by the California Department of Insurance and intends to fully cooperate on this investigation. At this time, the Company is unable to predict the timing and outcome of this matter.

Perry Johnson & Associates, Inc. Data Breach. On November 10, 2023, Perry Johnson & Associates, Inc., a third-party vendor of health information technology solutions that provides medical transcription services (“PJ&A”), notified Concentra Health Services, Inc. (“Concentra”) that certain information related to particular Concentra patients was potentially affected by a cybersecurity event. In February 2024, Concentra sent notices to almost four million patients who may have been impacted by the data breach. During the first quarter of 2024, Concentra became aware of six putative class action lawsuits filed against PJ&A and Concentra related to the data breach. The first was filed in the U.S. District Court for the Eastern District of Michigan on February 19, 2024 by Elliot Curry, individually and on behalf of all others similarly situated. Plaintiff alleged, among other things, that he became the victim of identity theft as a result of the PJ&A data breach and that Concentra had lax data security policies. The second was filed in the U.S. District Court for the Eastern District of New York on February 21, 2024 by Tiffany Williams and Jo Joaquim, individually and on behalf of all others similarly situated. Plaintiffs alleged, among other things, that they face an immediate and heightened risk of identity theft as a result of the data breach and that the defendants failed to take measures to properly safeguard their private information. The third was filed in the U.S. District Court for the Eastern District of Missouri on February 26, 2024 by Stephen Tate, a.k.a. Steven Tate, individually and on behalf of all others similarly situated. Plaintiff alleged, among other things, that he faces a heightened and imminent risk of identity theft as a result of the data breach and that the defendants failed to take measures to properly safeguard his private information. The fourth was filed in the U.S. District Court for the Eastern District of Michigan on February 26, 2024 by Eric Franczak, individually and on behalf of all others similarly situated. Plaintiff alleged, among other things, that he faces a substantially increased risk of fraud and identity theft as a result of the data breach and that the defendants failed to take measures to properly safeguard his private information. The fifth was filed in the U.S. District Court for the Eastern District of Michigan on March 6, 2024 by Lazema Johnson, individually and on behalf of all others similarly situated. Plaintiff alleged, among other things, that she faces a substantially increased risk of fraud and identity theft as a result of the data breach and that the defendants failed to take measures to properly safeguard her private information. The sixth was filed in the Superior Court of California, County of Los Angeles, on April 8, 2024 by Robert Valencia, individually and on behalf of all others similarly situated. Plaintiff alleged, among other things, that he faces a substantially increased risk of fraud and identity theft as a result of the data breach and that the defendants failed to take measures to properly safeguard his private information. Concentra is working with its cybersecurity risk insurance policy carrier and does not believe that the data breach or the lawsuits will have a material impact on its operations or financial performance. However, at this time, Concentra is unable to predict the timing and outcome of these matters.