Notice of data breach
Citrus Valley Health Partners notifies patients of data security incident
COVINA, Calif., Feb. 22, 2019—Citrus Valley Health Partners (CVHP) announced that a data security incident experienced by its business associate, Sharecare Health Data Services (SHDS), may have involved the personal and protected health information of some of its patients.
CVHP contracts with SHDS for certain medical record copy services in response to patient requests, court orders, subpoenas, and insurance-related inquiries. SHDS informed CVHP on December 28, 2018, that it had experienced a data security incident involving its servers which affected information belonging to certain patients of CVHP and other health organizations. Since learning of this incident, notification letters are being sent by SHDS to affected patients to notify them of the incident and to provide resources to assist them.
A detailed investigation by SHDS found that the protected health information of individuals may have been accessed from various health care facilities. With respect to CVHP, the data elements included combinations of names, date of birth, name and address of a facility that provided health services, and in some instances the name of a health care practitioner, medical record number, and internal SHDS processing notes. There is no evidence based on the investigation that any specific medical, financial, credit card or bank information was compromised in any way.
SHDS has established a toll-free call center to answer questions about the incident and to address related concerns. The call center can be reached at 855.295.3609. Although neither SHDS nor CVHP is aware at this time of the misuse of any impacted information, potentially impacted individuals have also been offered complimentary credit monitoring and identity protection services through AllClear ID.
The privacy and protection of patient information is a top priority for CVHP and it deeply regrets any inconvenience or concern that this incident may cause. This incident was not the result of any action or inaction by CVHP and did not affect the integrity or security of CVHP's digital environment.
For any questions, please contact Eric Maristela, Corporate Compliance Officer at 626.814.2752.