Dear Valued Patients, 

We take the privacy of our patients very seriously and this message is to notify you that your protected health information (“PHI”) may have been compromised as a result of a security breach at our practice. The breach occurred overnight on 12 November 2024 and was terminated immediately after we became aware of it on the morning of 13 November 2024. To the best of our knowledge and belief, information containing patient names, birthdates, social security numbers, insurance carriers, treatment dates, test results, treatment plans, and contact information were potentially accessible to an unauthorized intruder when the email inbox of one of our employees was compromised by a malicious actor. 

A thorough review of the correspondence attached files, and digitalized faxes in the employee’s email inbox showed that it contained patient referrals, patient registration forms, test results, authorization and consent forms, and prior treatment records which contained PHI. Please note that our electronic medical record and other network systems were not impacted by this security breach. NAAC has already begun outreach to patients that may have had compromised data from the users email account.

 Although you are not required to take any action, we suggest that you immediately take the following steps: 

• Call the toll-free numbers of any one of the three major credit bureaus (below) to place a fraud alert on your credit report. This can help prevent an identity thief from opening additional accounts in your name. As soon as the credit bureau confirms your fraud alert, the other two credit bureaus will automatically be notified to place alerts on your credit report, and all three reports will be sent to you free of charge. 

• Equifax: 1- 866-349-5191; www.equifax.com; P.O. Box 105069, Atlanta, GA 30348-5069. 

• Experian: 1-888-397-3742); www.experian.com; P.O. Box 9532, Allen, TX 75013. 

• TransUnion: 1-800-680-7289; www.transunion.com; Fraud Victim Assistance Division, P.O. Box 2000, Chester, PA 19016 

• Order your credit reports. By establishing a fraud alert, you will receive a follow-up letter that will explain how you can receive a free copy of your credit report. When you receive your credit report, examine it closely and look for signs of fraud, such as credit accounts that are not yours. 

• Continue to monitor your credit reports. Even though a fraud alert has been placed on your account, you should continue to monitor your credit reports to ensure an imposter has not opened an account with your personal information. 

 We deeply regret that this incident occurred and are taking steps to address it and to guard against future breaches. To that end, we have engaged outside experts to conduct a thorough review of our security measures and introduced additional training for all staff.  

 Please do not hesitate to contact us with any questions about this incident, or if you need additional information on what you should do as a result of the breach.