AUGUST 8th, 2023 UPDATE

Synergy Healthcare Services recently suffered a security incident that affected certain individuals’ protected health information and other personally identifiable information. We received the affected information in connection with providing professional services to Consulate Health Care, Raydiant Health Care, Independence Living Centers, and their affiliated care centers. While monitoring our network, we detected suspicious behavior in early December 2022 and soon detected unauthorized access to a limited portion of our files. We have been working since then to identify all of the affected individuals. While that process was ongoing, we posted information about this incident to our website on December 22nd. We are now providing this notice to share more information on what happened and what we are doing in response.

WHAT HAPPENED

We identified suspicious activity on our network in early December 2022 and engaged third-party experts to investigate. We determined on December 15th that an unauthorized third party accessed a portion of our computer network containing a number of files, including those with personal health information. Shortly thereafter, our investigation identified which files the unauthorized third party may have accessed. We shared those results with a data-review company on December 22nd so they could help us determine what information was in those files. The data-review company provided us their results on May 16, 2023, and we have been working diligently since then to determine who needs notice.

WHAT INFORMATION WAS INVOLVED

The affected files included information such as names, birthdates, signatures, insurance details, contact information, government identification (such as a driver’s license or Social Security number), medical history/treatment, and financial information (such as a bank account number). At this time, we have no reason to suspect that any of the affected information has been used fraudulently. 

WHAT WE ARE DOING

We worked with third-party experts to investigate and respond to the incident, and we are further securing our systems.

WHAT YOU CAN DO

We encourage individuals to (1) remain vigilant for unauthorized financial activity by reviewing their account statements and free credit reports, (2) consider placing a fraud alert of security freeze on their credit file, and (3) report any suspicious activity to law enforcement. You can also find additional suggestions at www.IdentityTheft.gov.

FOR MORE INFORMATION

Should you have any questions, you can contact us at (866) 935-7074 or use the link here to send in your questions online, and one of our representatives will be happy to assist you. Thank you for your understanding and patience.

ORIGINAL NOTICE OF INCIDENT

One of our vendors recently suffered a security incident in early December where cybercriminals targeted portions of their network. Our vendor promptly began working with third-party experts to help them investigate and respond to the incident. During that investigation, the vendor became aware that the unauthorized third party may have accessed records with personal information.

Although our vendor is still investigating the scope of that access, we are providing this notice out of an abundance of caution and because we value transparency. We will notify individuals if we determine that their information was in the files the third party accessed. In the meantime, we encourage individuals to (1) remain vigilant for unauthorized financial activity by reviewing your account statements and free credit reports, (2) consider placing a fraud alert of security freeze on your credit file (which you can do for free), and (3) report any suspicious activity to law enforcement.

We are in regular touch with our vendor, and we are closely monitoring the investigation. We understand that they are working to finish the investigation as quickly as they can.  In addition to the above details, we are providing below additional information that we believe could be helpful. We understand you may have questions. If you have any questions related to this notice or the security incident you can reach out to us with your questions at 866-572-8860. You can also use the link here to send in your questions online. Thank you for your understanding and patience.

ADDITIONAL INFORMATION

You can obtain a free copy of your credit report by visiting www.annualcreditreport.com [annualcreditreport.com] or calling (877) 322-8228. If the report is incorrect, you should contact the appropriate consumer reporting agency—Equifax, Experian, or TransUnion. Those agencies can also help you put a security freeze on your account. Additionally, you can contact the below resources to (1) get more information on fraud alerts or security freezes and (2) learn more about protecting yourself from fraud or identity theft:

Federal Trade Commission

600 Pennsylvania Ave.  NW

Washington, DC 20580

(202) 326-2222

www.ftc.gov [ftc.gov]

Equifax

P.O. Box 740241

Atlanta, GA 30374

(800) 685-1111

www.equifax.com [equifax.com]

Experian

P.O. Box 9701

Allen, TX 75013

(888) 397-3742

www.experian.com [experian.com]

TransUnion

P.O. Box 2000

Chester, PA 19016

(888) 909-8872

www.transunion.com [transunion.com]

Your Attorney General may also have resources on those issues. You can find their contact information by visiting: https://www.usa.gov/state-attorney-general [usa.gov].