Florida Digestive Health Specialists (“FDHS”) is providing notice of a data security incident that may have impacted protected health information (“PHI”) for individuals who were treated by FDHS. FDHS is a gastroenterology provider. There is no evidence that any patient health information was actually accessed or downloaded. However, to keep our patients fully informed and protected, we are notifying those who may have been impacted. At FDHS, we respect the privacy and security of all information within our control and sincerely apologize for any concern this may cause you.
What happened?
On March 28, 2024, FDHS learned that PHI may have been extracted from its systems. As soon as FDHS learned of the incident, it began an internal investigation to identify what occurred and what patient data may be at risk. FDHS also began working with independent cybersecurity specialists to help determine what had occurred, and whether any information was at risk. On April 30, 2024, in conjunction with law enforcement, FDHS was able to determine the scope of the information affected. Then, on June 14, 2024, the investigation concluded, and FDHS learned that some patient data may have been impacted. While we are not aware of any misuse of information we wanted to notify our patients of this incident.
What are we doing?
FDHS has taken steps to prevent a similar incident from occurring in the future, including putting additional security controls in place and conducting a thorough review of its existing security controls. FDHS respects the privacy and confidentiality of all information entrusted to it and will remain vigilant in its efforts to safeguard and protect all information within our control. FDHS identified some addresses for impacted individuals and mailed letters to impacted individual for whom contact information was identified. This letter contains more information about the incident, steps taken in response, and resources made available to impacted individuals. If an individual’s Social Security number was affected, credit monitoring and identity restoration services will be provided at no cost.
What can you do?
Individuals should remain vigilant for incidents of identity theft or fraud by reviewing bank account and other financial statements, as well as credit reports, for suspicious activity. Incidents of identity theft should be reported to law enforcement or the attorney general. Recommendations by the Federal Trade Commission regarding identity theft protection and details on how to place a fraud alert or a security freeze on a credit file can be found at www.identitytheft.gov. Individuals should monitor credit reports and financial statements for suspicious activity.
Please call 1-833-531-1388 Monday through Friday from 8 a.m. to 8 p.m. Eastern Time, excluding holidays, with any questions or concerns. FDHS regrets any inconvenience or concern this incident may cause.