Gulf Coast Pain Consultants, LLC d/b/a Clearway Pain Solutions Institute (“Clearway”) recently notified of patients a data incident affecting certain patient information.
On February 20, 2019, Clearway became aware that our electronic medical record (“EMR”) system was accessed in an unauthorized manner by a third party. Immediately upon becoming aware of this issue, we terminated the third party’s access to our EMR system. We notified law enforcement and are cooperating with their investigation into this incident. We also generated and reviewed logs to determine what information in our EMR system was accessed by the third party. Our investigation revealed that the third party accessed patients’ names, addresses, telephone numbers, email addresses, social security numbers, dates of birth, insurance information, name of referring provider, and other demographic information. The information that was accessed in an unauthorized manner did not include credit card information, financial account information, or the clinical information in patients’ medical records.
We are taking steps to avoid any future similar incidents. In addition to investigating this matter thoroughly and terminating the unauthorized access to our EMR system, we have reviewed all user accounts on our system and validated the access levels and activity for each account. We are reviewing and updating our policies and procedures regarding access to patient information and our systems as necessary. As an additional precaution, to reduce the risk of fraud or identity theft, we are offering affected individuals a one-year membership in Experian’s® IdentityWorks SM at no cost. This product provides patients with identity protection and resolution of identity theft.
We encourage individuals to take precautions to protect the security of their personal information. We recommend that they remain vigilant to prevent identity theft and fraud by monitoring credit reports and financial institution and other account statements. We also advise that they promptly report any suspicious activity or suspected identity theft. In addition, under the federal Fair Credit Reporting Act, individuals have the right as consumers to place fraud alerts on credit reports and to alert potential creditors or lenders of potential fraudulent activity related to the use of their personal information. They may do so by contacting credit reporting agencies, whose contact information is below.
Clearway takes information security and privacy very seriously. We deeply regret this situation and any inconvenience this may cause.
To Find Out More Information
To find out if your information was part of this incident, you may send an email to firstname.lastname@example.org
Contact Information for Credit Reporting Agencies
You can obtain information from the following sources on fraud alerts and security freezes:
PO Box 105069
Atlanta, GA 30348
PO Box 9701
Allen, TX 75013
1-800-680-7289 (fraud alert)
1-800-888-4213 (credit report)
PO Box 2000
Chester, PA 19022