Tift Regional Medical Center (“Tift”) has become aware of a data security incident that may have resulted in the disclosure of individuals’ personal information, including names and limited health information. Although at this time there is no evidence of any attempted or actual misuse of anyone’s information as a result of this incident, we have taken steps to notify all potentially impacted individuals and to provide resources to assist them.
On June 20, 2018, we learned that an unknown individual gained access to two employee email accounts. We quickly took action and notified our IT department of the incident, who prevented any further unauthorized access. We also retained a computer forensic company and conducted a detailed forensic investigation to determine what information may have been accessed.
As a result of our investigation, on October 19, 2018, we discovered that personal information, including some patients’ name, date of birth and limited health information may have been disclosed. No Social Security numbers, addresses, or financial account, payment or insurance information were accessed, and patient medical records were also not accessed.
We take the security of all information in our control very seriously, and are taking steps to prevent a similar event from occurring in the future. This includes providing additional training regarding phishing and spoofed emails to employees, increased email security, and updating our policies and procedures to reflect the additional security measures.
We mailed letters to individuals potentially impacted by this event which includes information about the incident and steps potentially impacted individuals can take to monitor and protect their personal information. We have also established a toll-free call center to answer questions about the incident and related concerns. The call center is available Monday through Friday from, 9:00 a.m. to 8:00 p.m. Eastern Time and can be reached at 1-800-939-4170.
The privacy and protection of personal information is a top priority for Tift, which sincerely regrets any concern or inconvenience that this matter may cause.