Hope Health Systems Inc.
de MCNA Dental

Notice of Data Security Event

Hope Health Systems Inc. (“HHS”), recently became aware of potentially suspicious activity within certain HHS computer systems that may have impacted the privacy of certain consumer information. HHS took immediate steps to investigate the nature and scope of the event. HHS is issuing this notice to provide information about the incident and steps potentially impacted individuals may take to protect against misuse of their information, where appropriate.

WHAT HAPPENED?

On June 20, 2022, HHS discovered encrypted files on certain computer systems. They immediately launched an investigation with the assistance of third-party cybersecurity and digital forensic specialists to determine the nature and scope of the incident. The investigation determined that there was unauthorized access to certain HHS servers beginning on June 10, 2022. On or about August 24, 2022, HHS determined it was unable to rule out unauthorized access to data stored on its affected systems. The investigation found no evidence that specific information was actually viewed by an unauthorized individual, but the investigation was unable to rule this activity out with absolute certainty. As access to data stored within their system could not be ruled out, they immediately undertook a review of the data at issue. This process completed on or about October 18, 2022. While HHS does not have any evidence of misuse of any consumer information in connection with this incident, out of an abundance of caution, HHS is providing notice of the event so potentially affected individuals may take steps to better protect their personal information, should they feel it is appropriate to do so.

WHAT INFORMATION WAS INVOLVED?

The information potentially at risk varies by individual. HHS continues efforts to notify potentially affected individuals directly. While those efforts remain underway, the consumer information potentially at risk may include the following types of information: name, address, date of birth, Social Security number, driver’s license number, health insurance information, and medical information.

WHAT IS HHS DOING?

Information security remains one of the highest priorities for HHS. HHS is evaluating its existing policies, procedures, and processes, including those related to cybersecurity, to determine whether additional measures are appropriate in an effort to reduce the likelihood of a similar future event.

WHAT CAN I DO?

HHS will provide direct notice to potentially affected individuals for whom we have address information beginning on or about November 21, 2022. Additional information is included in that notice. We encourage all persons who receive services from HHS and their caregivers to remain vigilant against incidents of identity theft and fraud by regularly reviewing account statements, explanation of benefits forms, and free credit reports for suspicious activity and to detect errors. You may also review and consider the information and resources outlined in the below “Steps Individuals Can Take To Help Protect Their Information.”

FOR MORE INFORMATION.

We understand that individuals may have questions that are not addressed in this notice. Should individuals have questions regarding this event, they may call a dedicated assistance line at 1-833-896-4932, which is available Monday through Friday, 9 a.m. to 9 p.m. Eastern Time. Individuals may also write to HHS at 1726 Whitehead Road, Suite 106, Gwynn Oak, Maryland 21207.

STEPS INDIVIDUALS CAN TAKE TO HELP PROTECT THEIR INFORMATION

Monitor Your Accounts

Individuals are encouraged to remain vigilant against incidents of identity theft and fraud, to review account statements, explanation of benefits forms, and to monitor credit reports for suspicious activity and to detect errors.  Under U.S. law you are entitled to one free credit report annually from each of the three major credit reporting bureaus.  To order your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228.  You may also contact the three major credit bureaus directly to request a free copy of your credit report.

Consumers have the right to place an initial or extended “fraud alert” on a credit file at no cost.  An initial fraud alert is a one-year alert that is placed on a consumer’s credit file.  Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit.  If you are a victim of identity theft, you are entitled to an extended fraud alert, which is a fraud alert lasting seven years.  Should you wish to place a fraud alert, please contact any one of the three major credit reporting bureaus listed below.

As an alternative to a fraud alert, consumers have the right to place a “credit freeze” on a credit report, which will prohibit a credit bureau from releasing information in the credit report without the consumer’s express authorization.  The credit freeze is designed to prevent credit, loans, and services from being approved in your name without your consent.  However, you should be aware that using a credit freeze to take control over who gets access to the personal and financial information in your credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, or any other account involving the extension of credit.  Pursuant to federal law, you cannot be charged to place or lift a credit freeze on your credit report.  To request a credit freeze, you will need to provide the following information:

1. Full name (including middle initial, as well as Jr., Sr., II, III, etc.);
2. Social Security number;
3. Date of birth;
4. Addresses for the prior two to five years;
5. Proof of current address, such as a current utility bill or telephone bill;
6. A legible photocopy of a government-issued identification card (state driver’s license or ID card, etc.); and
7. A copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft if you are a victim of identity theft.

Should you wish to place a credit freeze, please contact the three major credit reporting bureaus listed below:

Additional Information

You may further educate yourself regarding identity theft, fraud alerts, credit freezes, and the steps you can take to protect your personal information by contacting the consumer reporting bureaus, the Federal Trade Commission, or your state Attorney General.  The Federal Trade Commission may be reached at: 600 Pennsylvania Avenue NW, Washington, D.C. 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261.  The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them.  You can obtain further information on how to file such a complaint by way of the contact information listed above.  You have the right to file a police report if you ever experience identity theft or fraud.  Please note that in order to file a report with law enforcement for identity theft, you will likely need to provide some proof that you have been a victim.  Instances of known or suspected identity theft should be reported to law enforcement and your state Attorney General.  This notice has not been delayed by law enforcement.

For Maryland residents, the Maryland Attorney General may be contacted at: 200 St. Paul Place, 16th Floor, Baltimore, MD 21202; 1-410-528-8662 or 1-888-743-0023; and www.oag.state.md.us. Individuals may obtain information from these sources and/or the Federal Trade Commission using the contact information noted above about steps you can take to avoid identity theft. Individuals may also write to HHS at 1726 Whitehead Road, Suite 106, Gwynn Oak, Maryland 21207.

Recursos Adicionales

• Alertas de Fraude

• ---

• A pedido, cualquiera de las tres compañías de informes de crédito del consumidor nacionales puede poner una alerta de fraude gratuita en su expediente para advertir a los potenciales acreedores que usted podría ser víctima de robo de identidad; una alerta de fraude puede dificultar que una persona obtenga crédito a su nombre porque indica a los acreedores que sigan ciertos procedimientos para protegerlo.

  Una alerta de fraude ayudará a evitar que alguien abra cuentas nuevas a su nombre. Tan pronto una agencia de informes de crédito confirme su alerta de fraude, automáticamente se notificará a las demás que pongan también alertas de fraude. Las tres agencias de crédito le enviarán por correo postal una carta de confirmación y usted podrá solicitar informes de créditos gratuitos para su revisión.

  La forma más fácil de poner una alerta es visitando www.transunion.com o https://fraud.transunion.com/fa/fraudAlert.

  Deberá responder algunas preguntas para confirmar su identidad, y luego se añadirá una alerta de fraude de 90 días a su expediente de crédito. TransUnion le dará acceso para ver su informe en línea. Deberá examinarlo cuidadosamente para comprobar su exactitud. TransUnion también compartirá esta información con Equifax y Experian, que le enviarán cartas de confirmación por correo postal que incluirán un número al que deberá llamar para solicitar copias gratuitas de sus informes de créditos para su revisión.

  Para contactarse con una de las agencias de informes de crédito, vea a continuación:

  Equifax: 1-800-525-6285
  PO Box 740260
  Atlanta, GA 30374 (EEUU)

  Experian: 1-888-397-3742
  PO Box 9554
  Allen, TX 75013 (EEUU)

  TransUnion: 1-800-680-7289
  PO Box 2000
  Chester, PA 19016

  Solo es necesario que se contacte con una de estas agencias y utilice uno de estos métodos.

  No se le cobrará por este servicio. Tenga en cuenta que poner una alerta de fraude puede demorar su capacidad de abrir nuevas líneas de crédito de forma rápida.

• Informe de Crédito Anual

• ---

• a sea que decida o no inscribirse en el programa de protección de identidad de IDX, puede solicitar una copia de su informe de crédito, de forma gratuita, una vez al año, a cada agencia de informes de crédito. Puede obtener un informe de crédito gratuito visitando www.annualcreditreport.com o llamando al 1-877-322-8228.

• Revise Su Informe de Crédito

• ---

• Cuando recibe un informe de crédito, debe revisarlo cuidadosamente. Observe si figuran cuentas que usted no abrió. Observe si aparecen consultas de acreedores que usted no inició. Revise la información personal, como dirección particular, empleo o número de Seguro Social, que no sea exacta. Si ve algo que no entiende, llame a la agencia de informes de crédito al número de teléfono que figura en el informe.

  Si su informe de crédito indica fraude o robo de identidad, llame a la oficina del alguacil o policía local y haga una denuncia de robo de identidad. Obtenga una copia de la denuncia policial. Es posible que deba proporcionar copias de la denuncia policial a los acreedores para reorganizar sus registros. Si sospecha que podría ser víctima de robo de identidad y se ha inscrito en el programa de protección de identidad de IDX, debe contactarse con IDX de inmediato. Podrá hablar con un defensor informado sobre su situación y, si es necesario, se abrirá un caso para resolver el robo de identidad en su nombre.

• Para Obtener Más Información

• ---

• Si desea obtener más información sobre robo de identidad y las formas de protegerse, puede comunicarse con la Comisión Federal de Comercio (FTC) al 1-877-438-4338. El sitio web de la FTC, www.consumer.ftc.govtambién ofrece información adicional sobre robo de identidad que podría resultarle útil.

• Congelamientos de Seguridad

• ---

• El congelamiento de seguridad (o congelamiento de crédito) es una opción recomendada para las personas que sufrieron robo de identidad extremo. Dado que el congelamiento básicamente bloquea su crédito, no es una buena opción para las personas que simplemente buscan una protección extra para su crédito. Consideramos que el control de crédito, las alertas de fraude y los servicios de recuperación para víctimas son opciones más que suficientes para protegerse del robo de identidad.

  Un congelamiento de seguridad no le impedirá inscribirse en nuestros servicios. Definitivamente puede registrarse con nosotros sin necesidad de quitar el congelamiento. El motivo es que no solicitamos su número de Seguro Social para inscribirlo, solo su nombre, dirección, número de teléfono y correo electrónico. Ninguno de estos puntos requerirá una consulta de crédito. Sin embargo, un congelamiento de seguridad afectará su capacidad de activar la sección de control de su membresía. Para activar la sección de control, tendrá que quitar temporalmente el congelamiento de seguridad.

  Para obtener más información sobre congelamientos de seguridad y las leyes estatales pertinentes, contáctese con la oficina del procurador general del estado o visite el sitio web de la Comisión Federal de Comercio para consultar información sobre congelamiento de crédito.

  
  Tenga en cuenta que debe tener un expediente de crédito establecido y un historial de crédito para poner una alerta de fraude, solicitar un congelamiento de créditoo utilizar www.annualcreditreport.com.