Hope Health Systems Inc.
Informational Website

Notice of Data Security Event

Hope Health Systems Inc. (“HHS”), recently became aware of potentially suspicious activity within certain HHS computer systems that may have impacted the privacy of certain consumer information. HHS took immediate steps to investigate the nature and scope of the event. HHS is issuing this notice to provide information about the incident and steps potentially impacted individuals may take to protect against misuse of their information, where appropriate.

WHAT HAPPENED?

On June 20, 2022, HHS discovered encrypted files on certain computer systems. They immediately launched an investigation with the assistance of third-party cybersecurity and digital forensic specialists to determine the nature and scope of the incident. The investigation determined that there was unauthorized access to certain HHS servers beginning on June 10, 2022. On or about August 24, 2022, HHS determined it was unable to rule out unauthorized access to data stored on its affected systems. The investigation found no evidence that specific information was actually viewed by an unauthorized individual, but the investigation was unable to rule this activity out with absolute certainty. As access to data stored within their system could not be ruled out, they immediately undertook a review of the data at issue. This process completed on or about October 18, 2022. While HHS does not have any evidence of misuse of any consumer information in connection with this incident, out of an abundance of caution, HHS is providing notice of the event so potentially affected individuals may take steps to better protect their personal information, should they feel it is appropriate to do so.

WHAT INFORMATION WAS INVOLVED?

The information potentially at risk varies by individual. HHS continues efforts to notify potentially affected individuals directly. While those efforts remain underway, the consumer information potentially at risk may include the following types of information: name, address, date of birth, Social Security number, driver’s license number, health insurance information, and medical information.

WHAT IS HHS DOING?

Information security remains one of the highest priorities for HHS. HHS is evaluating its existing policies, procedures, and processes, including those related to cybersecurity, to determine whether additional measures are appropriate in an effort to reduce the likelihood of a similar future event.

WHAT CAN I DO?

HHS will provide direct notice to potentially affected individuals for whom we have address information beginning on or about November 21, 2022. Additional information is included in that notice. We encourage all persons who receive services from HHS and their caregivers to remain vigilant against incidents of identity theft and fraud by regularly reviewing account statements, explanation of benefits forms, and free credit reports for suspicious activity and to detect errors. You may also review and consider the information and resources outlined in the below “Steps Individuals Can Take To Help Protect Their Information.”

FOR MORE INFORMATION.

We understand that individuals may have questions that are not addressed in this notice. Should individuals have questions regarding this event, they may call a dedicated assistance line at 1-833-896-4932, which is available Monday through Friday, 9 a.m. to 9 p.m. Eastern Time. Individuals may also write to HHS at 1726 Whitehead Road, Suite 106, Gwynn Oak, Maryland 21207.

STEPS INDIVIDUALS CAN TAKE TO HELP PROTECT THEIR INFORMATION

Monitor Your Accounts

Individuals are encouraged to remain vigilant against incidents of identity theft and fraud, to review account statements, explanation of benefits forms, and to monitor credit reports for suspicious activity and to detect errors.  Under U.S. law you are entitled to one free credit report annually from each of the three major credit reporting bureaus.  To order your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228.  You may also contact the three major credit bureaus directly to request a free copy of your credit report.

Consumers have the right to place an initial or extended “fraud alert” on a credit file at no cost.  An initial fraud alert is a one-year alert that is placed on a consumer’s credit file.  Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit.  If you are a victim of identity theft, you are entitled to an extended fraud alert, which is a fraud alert lasting seven years.  Should you wish to place a fraud alert, please contact any one of the three major credit reporting bureaus listed below.

As an alternative to a fraud alert, consumers have the right to place a “credit freeze” on a credit report, which will prohibit a credit bureau from releasing information in the credit report without the consumer’s express authorization.  The credit freeze is designed to prevent credit, loans, and services from being approved in your name without your consent.  However, you should be aware that using a credit freeze to take control over who gets access to the personal and financial information in your credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, or any other account involving the extension of credit.  Pursuant to federal law, you cannot be charged to place or lift a credit freeze on your credit report.  To request a credit freeze, you will need to provide the following information:

1. Full name (including middle initial, as well as Jr., Sr., II, III, etc.);
2. Social Security number;
3. Date of birth;
4. Addresses for the prior two to five years;
5. Proof of current address, such as a current utility bill or telephone bill;
6. A legible photocopy of a government-issued identification card (state driver’s license or ID card, etc.); and
7. A copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft if you are a victim of identity theft.

Should you wish to place a credit freeze, please contact the three major credit reporting bureaus listed below:

Additional Information

You may further educate yourself regarding identity theft, fraud alerts, credit freezes, and the steps you can take to protect your personal information by contacting the consumer reporting bureaus, the Federal Trade Commission, or your state Attorney General.  The Federal Trade Commission may be reached at: 600 Pennsylvania Avenue NW, Washington, D.C. 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261.  The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them.  You can obtain further information on how to file such a complaint by way of the contact information listed above.  You have the right to file a police report if you ever experience identity theft or fraud.  Please note that in order to file a report with law enforcement for identity theft, you will likely need to provide some proof that you have been a victim.  Instances of known or suspected identity theft should be reported to law enforcement and your state Attorney General.  This notice has not been delayed by law enforcement.

For Maryland residents, the Maryland Attorney General may be contacted at: 200 St. Paul Place, 16th Floor, Baltimore, MD 21202; 1-410-528-8662 or 1-888-743-0023; and www.oag.state.md.us. Individuals may obtain information from these sources and/or the Federal Trade Commission using the contact information noted above about steps you can take to avoid identity theft. Individuals may also write to HHS at 1726 Whitehead Road, Suite 106, Gwynn Oak, Maryland 21207.

Additional Resources

• Fraud Alerts

• ---

• On request, any of the three nationwide consumer credit reporting companies can place a free fraud alert in your file to alert potential creditors that you may be a victim of identity theft; a fraud alert can make it more difficult for someone to get credit in your name because it tells creditors to follow certain procedures to protect you.

  A fraud alert will help prevent someone from opening new accounts in your name. As soon as one credit reporting bureau confirms your fraud alert, the others are automatically notified to place fraud alerts as well. All three bureaus will mail you a confirmation letter and you will be able to order complimentary credit reports for your review.

  The easiest way to place an alert is by visiting www.transunion.com or https://fraud.transunion.com/fa/fraudAlert.

  You will answer some questions to confirm your identity, and then a 90-day fraud alert will be added to your credit file. TransUnion will give you access to view your report online. You should examine it carefully for accuracy. TransUnion will also share this information with Equifax and Experian who will both mail you confirmation letters containing a number to call to order complimentary copies of your credit reports for review.

  To contact one of the credit reporting bureaus, please see below:

  Equifax: 1-800-525-6285
  PO Box 740260
  Atlanta, GA 30374

  Experian: 1-888-397-3742
  PO Box 9554
  Allen, TX 75013

  TransUnion: 1-800-680-7289
  PO Box 2000
  Chester, PA 19016

  It is only necessary to contact one of these bureaus and use one of these methods.

  You will not be charged for this service. Please note placing a fraud alert may delay your ability to open new lines of credit quickly.

• Annual Credit Report

• ---

• Whether or not you choose to enroll in the IDX identity protection program, you can order a copy of your credit report, for free, once a year from each credit reporting bureau.  You can obtain a free credit report by visiting www.annualcreditreport.com or by calling 1-877-322-8228.

• Review Your Credit Report

• ---

• When you receive any credit report, you should review it carefully.  Look for accounts you did not open.  Look for inquiries from creditors that you did not initiate.  Look for personal information, such as home address, employment or Social Security numbers, that are not accurate.  If you see anything you do not understand, call the credit reporting bureau at the telephone number on the report.

  If your credit report indicates fraud or identity theft, call your local police or sheriff’s office and file a report of identity theft.  Get a copy of the police report.  You may need to give copies of the police report to creditors to clear up your records. If you suspect that you may be a victim of identity theft and you have enrolled in the IDX identity protection program, you should contact them immediately. You will be able to speak with a knowledgeable advocate about your situation and, if needed, they will open a case to resolve the identity theft on your behalf.

• For More information

• ---

• Should you wish to learn more about identity theft and how to protect yourself, you may contact the Federal Trade Commission at 1-877-438-4338. The FTC website, www.consumer.ftc.gov, also offers additional information on identity theft that you may find helpful.

• Security Freezes

• ---

• The security freeze (or credit freeze) is an option best reserved for people who have experienced extreme identity theft. Because the freeze essentially locks down your credit, it is not a good option for people who are simply seeking extra protection for their credit. We feel that credit monitoring, fraud alerts, and victim restoration services are more than sufficient options for defense against identity theft.

  A security freeze will not prevent you from enrolling in our services. You can certainly sign up with us and do not need to lift the freeze to do so. The reason for this is because we do not request your Social Security number to enroll—only name, address, phone, and email. None of these items would necessitate a credit inquiry. However, a security freeze will affect your ability to activate the monitoring portion of your membership. To activate the monitoring portion you will need to temporarily lift your security freeze.

  To learn more about security freezes and relevant state laws, contact your State Attorney General’s office or visit the Federal Trade Commission’s website for credit freeze information.

  
  Please note that you must have an established credit file and credit history to place a fraud alert, a credit freeze or utilize www.annualcreditreport.com.