LITTLE ROCK (KATV) — Methodist Family Health said they have been alerting some Arkansans about a ransomware attack, affecting health information.
The protected health information ransomware was breached on March 4 but was detected on March 6.
After there was an investigation, it was found that a variety of documents a business used to provide pharmacy services, containing health information was copied without authorization.
According to MFH, the kind of information that can get breached is individual's full name, date of birth, date of admission or treatment, home address, account number, diagnosis, service charges, or medication information.
"Through our internal investigation and our consultations with and examinations by outside cybersecurity and privacy specialists, we have determined soon after the breach was detected, unauthorized access was terminated and additional measures were taken to strengthen privacy and data security," said MFH. "We continuously review and update our internal processes and procedures and will implement suggested guidance. Our additional cybersecurity measures are specifically designed to ensure the safety and security of patients’ PHI. We take safeguarding our patients’ PHI very seriously and will continue to strive to fully protect all privacy interests of our clientele."
MFH said they are notifying those whose information may have been involved in the data breach and they understand the trust their patients have put in them, and they also take patient information seriously.
So if you have been notified that you were a victim of the cyberattack, what is your next plan of action?
In the release, MFH included a list of resources.
That includes filing a complaint with the Federal Trade Commission.
To do that, go to the FTC website and first explain what you lost during the breach.
From there, the FTC can provide a personalized recovery plan fit for your needs.
Once a plan is made, you can make an account on the FTC website and they will walk you through each step to ensure your personal information is once again safe.
They can also track the progress of your recovery plan and change it depending on the needs that arise.
Once a complaint has been filed through the FTC, it will immediately be added to the FTC Identity Theft Data Clearinghouse.
This will go straight to a database that law enforcement agencies can access.
MFH said they have notified each patient that was affected by the breach and if anyone is experiencing fraudulent activity or identity theft, to contact law enforcement, the state Attorney General, or the FTC as soon as possible.
In the release, MFH said it might be best to put a freeze on your credit account.
This will make it harder for someone to open a new account in your name and prevent access into your credit reporting agency.
More information from the Methodist Family Health press release:
For more information on filing a claim with the Federal Trade Commission, click here.
To reach both the Federal Trade Commission and the Attorney General, click here.