Notice of Data Privacy Incident

We recently discovered that an external third party obtained unauthorized access to an employee’s email account. We subsequently learned that personally identifiable information of some of our employees and protected health information of some of our patients/clients may have been accessed by the unauthorized external third party. Upon discovering the potential unauthorized access by the external third party, we immediately contacted law enforcement and engaged external experts to conduct an investigation, which included the engagement of forensics experts to determine the nature and scope of the access by the external third party. The forensics experts have concluded that this was an isolated incident confined to one individual’s email account being compromised.

An investigation into the scope of the incident was launched to determine what, if any, information was accessed and acquired by the unauthorized party. The investigation, which has been extensive and labor intensive determined that certain employees’ and patients’ information may have been exposed to the unauthorized party. The employee information that may have been accessed consisted of the following: name, address, birthdate, social security number and/or health insurance information.

The patient/client information that may have been accessed consisted of the following: name, address, birthdate, social security number, driver’s license number, credit card number, banking information, patient identification number, treatment and diagnosis information and/or health insurance information.

While the investigation to date did not find any instances of fraud or identity theft that have occurred as a result of this incident, out of an abundance of caution, we are beginning to notify employees and patients/clients whose information was involved and to provide resources they can use to help protect their information including by offering complimentary credit monitoring and identity theft protection services through Kroll.

Data security is one of our highest priorities. Since discovering this incident, we have taken steps to enhance our IT security defenses and internal protocols to help prevent a similar incident from occurring in the future.

Individuals with questions may contact the dedicated call center. The call center phone number is (855) 532-0446 and the operational hours are 8:00am – 5:30pm Central Time, Monday through Friday, excluding major U.S. holidays.