Notice of Data Event

Last updated: October 8, 2024

Empath regrets to inform that our organization has encountered an unfortunate event that may have resulted in unauthorized access to some patient protected health information. Ensuring the proper handling of patient information is of utmost importance to us, and we are committed to providing available information regarding this matter.

 

On February 27, 2024, we identified that certain individual email accounts may have been accessed without permission. In response to this matter, we took steps to confirm the security of the accounts and determine what occurred. Our review identified that certain accounts were accessed between February 26 and 27, 2024. Further, during the review, we identified an account that was accessed between December 5 and 6, 2023. Because of this, we conducted a review of the accounts to identify the types of information in the accounts, and to whom the information related. We began issuing rolling notifications starting in April 2024 while the account review was ongoing, and also published a notice about this matter on our website.

 

The full account review was complete on September 12, 2024. We identified that certain patient information was maintained in the accounts. The categories of information in the accounts varied by patient, but collectively included demographic, financial, clinical, certain care costs, and health insurance information. Should individuals feel that steps need to be taken, we have provided a list of free resources below.

 

As part of our response to this matter, we implemented additional technical security measures and are evaluating our policies, practices, and staff training to prevent a matter like this from reoccurring.

 

If there are any questions regarding this matter, our dedicated representatives are available for 90 days from the date of this notice to assist in resolving them promptly. Feel free to reach out to our dedicated assistance line at 1-833-543-3395 during our operating hours, Monday through Friday, 8:00 a.m. to 8:00 p.m. Eastern time, excluding holidays. Alternatively, individuals can contact us by mail at Empath Health, Attn: HIPAA Privacy Officer, 6310 Capital Drive, Lakewood Ranch, FL 34202.

 

Sincerely,
Empath Health

 

Steps Individuals Can Take To Protect Personal Information

Any steps that individuals may wish to take in response to this matter are a personal decision. If individuals would like to take steps to learn about how to obtain a free credit report, place a fraud alert or security freeze on a credit file, or educate themselves about identity theft, fraud, and recovery from the same, individuals may consider using the below free resources.

To order a free credit report, individuals may visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228.

To place a fraud alert or security freeze on a credit file, individuals may contact the three major consumer reporting agencies at the following:

 

To educate themselves about identity theft, fraud, and recovery from unauthorized activity, individuals may also use the Federal Trade Commission’s free resources at www.identitytheft.gov or by calling 1-877-ID-THEFT (1-877-438-4338).

Further, to prevent unauthorized use of a decedent’s credit file, one may report the decedent’s passing to the credit reporting bureaus. When one credit reporting bureau is notified of an individual’s passing, it will notify the other credit reporting bureaus. The below steps can be used to report an individual’s passing to the credit reporting bureaus.

  • Equifax: Mail a copy of the death certificate to Equifax Information Services LLC, P.O. Box 105139, Atlanta, GA 30348-5139.
  • Experian: Mail a copy of the death certificate to Experian’s Consumer Assistance Center, P.O. Box 4500, Allen, TX 75013, or upload it online at experian.com/consumer/upload/.
  • TransUnion: Mail a copy of the death certificate to TransUnion, P.O. Box 2000, Chester, PA 19016.

 

In addition to notifying the credit reporting bureaus of an individual’s passing, a copy of the individual’s credit report can be requested. Obtaining a copy of the individual’s credit report will assist with identifying a list of accounts to help notify creditors that an individual has passed away. To order a free credit report, individuals may visit the website or toll-free phone number listed above.