Irvine, Ky. (March 17, 2017)
On January 17, 2017, Estill County Chiropractic (“ECC”) discovered that an unauthorized user installed malicious software on its computer system that encrypted patient files. ECC immediately shut down the system. Although ECC was already taking security precautions, ECC replaced the system and included additional security measures.
ECC worked diligently to restore files that contained patients’ health information, and also hired a computer consultant to help determine how this event happened. ECC believes there were initial instances of unauthorized access to its system beginning January 6, 2017, ending with the encryption of files on January 17, 2017.
While ECC’s computer consultant’s investigation did not indicate that patient information was actually taken or viewed, ECC also cannot entirely rule this out. The types of information that may have been viewed during this time frame include patient names, email addresses, phone numbers, addresses, dates of birth, Social Security numbers, clinical information, provider notes, diagnosis information, claims, and health plan numbers.
ECC has arranged with Equifax Personal Solutions to offer patients who may be impacted credit monitoring at no cost to the patient for a period of one year. Those patients will receive a letter with information on how to enroll in the credit monitoring offer.
ECC recommends patients remain vigilant to the possibility of fraud and identity theft by reviewing account statements and monitoring free credit reports for unauthorized activity. Individuals can obtain a free credit report directly from each of the three nationwide credit reporting agencies. Contact information for the three nationwide credit reporting agencies is as follows:
| Equifax P.O. Box 740241 Atlanta, GA 30374 www.equifax.com |
Experian P.O. Box 2002 Allen, TX 75013 www.experian.com |
TransUnion P.O. Box 1000 Chester, PA 19016 www.transunion.com |
Individuals who suspect identity theft has occurred should contact local law enforcement authorities to file a police report. Individuals can also contact the Federal Trade Commission www.ftc.gov/idtheft or state Attorney General. The Federal Trade Commission provides information on steps an individual can take to avoid identity theft. Individuals can also obtain additional information from the credit reporting agencies above or the Federal Trade Commission about placing a fraud alert or security freeze on their credit reports.
ECC has established a toll-free number for patients who have questions that will available Monday through Friday from 9:00 AM to 9:00 PM Eastern Time. The toll-free number to call is 844-420-6496.