Update on August 2023 Cybersecurity Incident

In late August 2023, HSHS identified a cybersecurity incident that impacted our hospital and clinic operations, and most of our communications systems. Upon discovering the incident, HSHS immediately took steps to contain and remediate the incident. We reported the incident to law enforcement and launched a forensic investigation with the assistance of a leading forensic security firm. Through HSHS’s investigation, we have determined that an unauthorized third-party accessed certain files on our network between August 16 and August 27, 2023. We have since been reviewing those files and notifying individuals whose information was found in the files on a rolling basis as our review has continued. This process is time-intensive, but ultimately necessary to properly identify potentially affected individuals to the extent reasonably possible.

The type of information varied for each individual, but may have included names, addresses, dates of birth, Social Security numbers, driver’s license numbers, medical record numbers, and/or limited medical, health insurance and/or treatment information related to care received at HSHS.

In accordance with applicable law, HSHS is notifying affected individuals through mailing notification letters to addresses we have on file and through other methods, and providing additional services so affected individuals may take steps to protect their information. At this point, we have found no evidence that personal information or protected health information has been misused in connection with this incident.

Nonetheless, as an added precaution, we are offering complimentary access to credit monitoring and identity theft protection services for those individuals whose Social Security numbers and/or driver’s license numbers were potentially involved. We encourage the individuals who received a notification letter to take advantage of these additional resources.

As a best practice, individuals should remain vigilant and carefully review statements they receive from healthcare providers and health insurers and report any inaccuracies to those companies.

HSHS has set up a dedicated, toll-free call center to support individuals with questions about the incident. The call center can be reached at 866-574-0181, Monday – Friday between 8:00 AM to 8:00 PM, Central Time. HSHS sincerely regrets any inconvenience or concern this incident has caused, and values the trust placed in us to protect the privacy of the information entrusted to us. We continue to take steps to enhance the security of our systems. Thank you for your patience and support throughout this investigation process.