Notice to our Patients of Possible Unauthorized Access to Patient Information
Hematology Oncology Associates, PC (“HOA”) is committed to protecting the confidentiality and security of our patients’ information. Regrettably, this notice concerns an incident involving some of that information.
On March 19, 2019, we learned that an unauthorized person gained access to some employee email accounts on December 18, 2018, and between February 22, 2019 and February 28, 2019. We immediately secured the accounts, began an investigation, and hired a computer forensic firm to assist. The investigation was not able to determine which emails and attachments were viewed by the unauthorized person(s). We therefore conducted a thorough review of the email accounts involved and, on April 20, 2019, determined that an email or attachment potentially accessed by the unauthorized person(s) contained patient information, including patient names, Social Security numbers, driver’s license numbers, dates of birth, health insurance member/group numbers, financial account information, and payment card information.
We regret that this incident occurred and any concern it may cause. We are mailing notification letters to patients whose information was found in the accounts. The letters provide additional information about how they can protect themselves and, for eligible patients, enrollment instructions for one year of complimentary credit monitoring services.
HOA remains committed to protecting the confidentiality and security of our patients’ information. To help prevent something like this from happening in the future, we forced a password change for all employees and are reinforcing employee training on how to detect and avoid phishing emails.
Patients with questions can call 1-855-424-7680, from 6 a.m. to 6 p.m. Pacific Time, Monday through Friday.