NOTICE OF JACKSONVILLE CHILDREN’S MULTISPECIALTY CLINIC CYBERATTACK INCIDENT
Jacksonville Children’s Multispecialty Clinic (“JCMC”) prioritizes providing high-quality care and upholding high privacy standards but is providing notice of an incident that may affect the privacy of its patients’ information.
JCMC has confirmed that an unauthorized user gained access to its network in September 2023 and deployed ransomware. After discovering the incident, JCMC immediately took steps to isolate and contain the incident. With the assistance of cybersecurity experts, JCMC launched a thorough and robust investigation into the nature and scope of the incident. The investigation revealed that certain patient information may have been accessed, but there is no evidence that the information was further misused as a result of the incident.
After JCMC confirmed that patient information was accessed, it began an extensive data mining effort to identify potentially affected individuals. Due to the number of files affected and the number of patients with the same name, we have only recently been able to identify the individuals who were affected. Although there is no evidence that any patient information has been misused for purposes of fraud or identity theft, JCMC is providing this notice in an abundance of caution.
Since the incident, JCMC has worked internally and with outside security consultants to implement additional measures to prevent the recurrence of such an attack and to further protect the privacy of its valued patients.
JCMC will be notifying the individuals whose personal information was involved in the incident. For most patients, this protected health information consists of demographic information such as name and date of birth; patient account number and Medicaid ID; and billing/claims information such as date of service, procedure codes, amount billed, and health insurance policy number. Fortunately, there is no evidence that financial account information or Social Security numbers were compromised. JCMC will provide, at no cost to its patients, credit monitoring and identity theft protection services to individuals affected by the incident.
Again, while JCMC is unaware of any actual or attempted misuse of protected health information for the purpose of committed fraud or identity theft, JCMC nevertheless encourages individuals to review credit reports and health insurance information and to report any suspicious activity to the institution that issued the record immediately.
For additional information, contact JCMC’s toll-free hotline at (888) 989-0295 Monday through Friday 9 am – 9 pm CST. Knowledgeable agents will be able to answer questions related to the incident.