Notice of Data Event

Last updated: April 25, 2024

Empath regrets to inform that our organization has encountered an unfortunate event that may have resulted in unauthorized access to some patient protected health information. Ensuring the proper handling of patient information is of utmost importance to us, and we are committed to providing available information regarding this matter.

On February 27, 2024, we identified that certain individual email accounts may have been accessed without permission. In response to this matter, we took steps to confirm the security of the accounts and determine what occurred. Our review identified that certain accounts were accessed between February 26 and 27, 2024. Further, during the review, we identified an account that was accessed between December 5 and 6, 2023. Because of this, we conducted a review of the accounts to identify the types of information in the accounts, and to whom the information related. While our review is ongoing, we did identify that some patient information was maintained in the accounts. The categories of information in the accounts varies by patient, but collectively includes the following: name, date of birth, patient identifier, treatment information, and certain care costs. Fortunately, given the nature of this information, we have not identified any potential risk of identity theft or fraud, and any steps individuals may wish to take in response to this matter are a personal decision. Should individuals feel that steps need to be taken, we have provided a list of free resources below.

As part of our response to this matter, we implemented additional technical security measures and are evaluating our policies, practices, and staff training to prevent a matter like this from reoccurring.

If there are any questions regarding this matter, our dedicated representatives are available for 90 days from the date of this notice to assist in resolving them promptly. Feel free to reach out to our dedicated assistance line at 1-833-543-3395 during our operating hours, Monday through Friday, 8:00 a.m. to 8:00 p.m. Eastern time, excluding holidays. Alternatively, individuals can contact us by mail at Empath Health, Attn: HIPAA Privacy Officer, 6310 Capital Drive, Lakewood Ranch, FL 34202.

 

Steps Individuals Can Take To Protect Personal Information

As referenced above, any steps that individuals may wish to take in response to this matter are a personal decision. If individuals would like to take steps to learn about how to obtain a free credit report, place a fraud alert or security freeze on a credit file, or educate themselves about identity theft, fraud, and recovery from the same, individuals may consider using the below free resources.

To order a free credit report, individuals may visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228.

To place a fraud alert or security freeze on a credit file, individuals may contact the three major consumer reporting agencies at the following:

 

To educate themselves about identity theft, fraud, and recovery from unauthorized activity, individuals may also use the Federal Trade Commission’s free resources at www.identitytheft.gov or by calling 1-877-ID-THEFT (1-877-438-4338).

Further, to prevent unauthorized use of a decedent’s credit file, one may report the decedent’s passing to the credit reporting bureaus. When one credit reporting bureau is notified of an individual’s passing, it will notify the other credit reporting bureaus. The below steps can be used to report an individual’s passing to the credit reporting bureaus.

  • Equifax: Mail a copy of the death certificate to Equifax Information Services LLC, P.O. Box 105139, Atlanta, GA 30348-5139.
  • Experian: Mail a copy of the death certificate to Experian’s Consumer Assistance Center, P.O. Box 4500, Allen, TX 75013, or upload it online at experian.com/consumer/upload/.
  • TransUnion: Mail a copy of the death certificate to TransUnion, P.O. Box 2000, Chester, PA 19016.

 

In addition to notifying the credit reporting bureaus of an individual’s passing, a copy of the individual’s credit report can be requested. Obtaining a copy of the individual’s credit report will assist with identifying a list of accounts to help notify creditors that an individual has passed away. To order a free credit report, individuals may visit the website or toll-free phone number listed above.