MedQIA Provides Notification of Data Security Incident

MedQIA, LLC (“MedQIA”) has become aware of an incident that may have impacted limited information in our possession. We take the privacy and security of all information very seriously and have distributed notification of this incident to potentially impacted individuals.

 

We recently identified suspicious activity related to one employee email account. Upon discovery, we took swift action to secure our email system and network. We alsolaunched an internal investigation and engaged leading, independent cybersecurity specialists. Based on this investigation, we confirmed that one employee email account was subject to unauthorized access for a limited period of time between November 3, 2021 and November 23, 2021.

 

We subsequently engaged in a thorough programmatic and manual review of the mailbox contents in order to identify whether the impacted account contained sensitive information and to whom such information belonged. On April 14, 2022, this review was completed and we discovered that the information present within the affected account includes one or more of the following data elements: first and last name, Social Security number, financial account number, medical information, and/or health insurance information.

 

It is important to note that we are not aware of any evidence to suggest that individuals’ information was  viewed or subject to actual or attempted misuse. Rather, we confirmed that the account was subject to unauthorized access and provided notification in an abundance of caution. In addition to informing potentially impacted individuals about the incident, the notification letter includes steps that potentially impacted individuals can take to help protect their information and provides these individuals access to complimentary identity monitoring and protection services. We take the security of all information very seriously and have taken steps to enhance security measures to help prevent a similar occurrence in the future.

 

We have established a dedicated assistance line to address any questions individuals may have which can be reached at 844-995-4342, Monday through Friday, 6 a.m. to 6:00 p.m. Pacific Time. We may also be contacted by mail at 1171 S. Robertson Blvd., #414, Los Angeles, CA 90035.

 

We also offer the following information for individuals wanting to know more about steps that they can take to help protect their information:

What steps can I take to protect my private information?

  • If you detect suspicious activity on any of your accounts, you should promptly notify the financial institution or company with which the account is maintained. You should also report any fraudulent activity or any suspected incidents of identity theft to law enforcement.
  • You may obtain a copy of your credit report at no cost from each of the three nationwide credit reporting agencies.  To do so, visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three agencies appears at the bottom of this page.
  • You can take steps recommended by the Federal Trade Commission to protect yourself from identify theft. The FTC’s website offers helpful information at www.ftc.gov/idtheft.

Was my information specifically impacted?

As mentioned above, MedQIA has no evidence to suggest that any information was actually viewed or subject to actual or attempted misuse. Rather, MedQIA confirmed that the account was subject to unauthorized access and provided notification in an abundance of caution to those potentially impacted.

 

How do I obtain a copy of my credit report?

You can obtain a copy of your credit report, free of charge, directly from each of the three nationwide credit reporting agencies once every twelve (12) months. To do so, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three agencies is included in the notification letter and is also listed at the bottom of this page.

 

How do I put a fraud alert on my account?

You may consider placing a fraud alert on your credit report. This fraud alert informs creditors of possible fraudulent activity within your report and requests that creditors contact you prior to establishing any accounts in your name. To place a fraud alert on your credit report, contact Equifax, Experian or TransUnion and follow the Fraud Victims instructions. To place a fraud alert on your credit accounts, contact your financial institution or credit provider. Contact information for the three nationwide credit reporting agencies is listed below.

 

Contact information for the three nationwide credit reporting agencies is as follows:

TransUnion

1-800-680-7289

www.transunion.com

 

TransUnion Fraud Alert

P.O. Box 2000

Chester, PA 19016-2000

 

TransUnion Credit Freeze

P.O. Box 160

Woodlyn, PA 19094

Experian

1-888-397-3742

www.experian.com

 

Experian Fraud Alert

P.O. Box 9554

Allen, TX 75013

 

Experian Credit Freeze

P.O. Box 9554

Allen, TX 75013

Equifax

1-888-298-0045

www.equifax.com

 

Equifax Fraud Alert

P.O. Box 105069

Atlanta, GA 30348-5069

 

Equifax Credit Freeze

P.O. Box 105788

Atlanta, GA 30348-5788

 

Additional Information

You can further educate yourself regarding identity theft, fraud alerts, credit freezes, and the steps you can take to protect your personal information by contacting the credit reporting bureaus, the Federal Trade Commission (FTC), or your state Attorney General. The FTC also encourages those who discover that their information has been misused to file a complaint with them. The FTC may be reached at 600 Pennsylvania Ave. NW, Washington, D.C. 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261.

 

You have the right to file a police report if you ever experience identity theft or fraud.  Please note that in order to file a report with law enforcement for identity theft, you will likely need to provide some proof that you have been a victim.  Instances of known or suspected identity theft should also be reported to law enforcement, your state Attorney General, and the FTC.

 

For Maryland residents, the Maryland Attorney General may be contacted at 200 St. Paul Place, 16th Floor, Baltimore, MD 21202; 1-888-743-0023; and www.oag.state.md.us. MedQIA may be contacted by mail at 1171 S. Robertson Blvd., #414, Los Angeles, CA 90035.

 

For New Mexico residents, you have rights pursuant to the Fair Credit Reporting Act, such as the right to be told if information in your credit file has been used against you, the right to know what is in your credit file, the right to ask for your credit score, and the right to dispute incomplete or inaccurate information.  Further, pursuant to the Fair Credit Reporting Act: (i) the consumer reporting agencies must correct or delete inaccurate, incomplete, or unverifiable information; (ii) the consumer reporting agencies may not report outdated negative information; (iii) access to your file is limited; (iv) you must give consent for credit reports to be provided to employers; (v) you may limit “prescreened” offers of credit and insurance you get based on information in your credit report; (vi) and you may seek damages from  violators.  You may have additional rights under the Fair Credit Reporting Act not summarized here.  Identity theft victims and active-duty military personnel have specific additional rights pursuant to the Fair Credit Reporting Act.  We encourage you to review your rights pursuant to the Fair Credit Reporting Act by visiting https://files.consumerfinance.gov/f/201504_cfpb_summary_your-rights-under-fcra.pdf, or by writing Consumer Response Center, Room 130-A, FTC, 600 Pennsylvania Ave. N.W., Washington, D.C. 20580.

 

For New York residents, the New York Attorney General may be contacted at Office of the Attorney General, The Capitol, Albany, NY 12224-0341; 1-800-771-7755; or https://ag.ny.gov.

 

For North Carolina residents, the North Carolina Attorney General may be contacted at 9001 Mail Service Center, Raleigh, NC 27699-9001; 1-877-566-7226 or 1-919-716-6000; and www.ncdoj.gov.

 

For Rhode Island residents, the Rhode Island Attorney General may be contacted at 150 South Main Street, Providence, RI 02903; 1-401-274-4400; and www.riag.ri.gov.  Under Rhode Island law, you have the right to obtain any police report filed in regard to this incident.

 

For Washington, D.C. residents, the District of Columbia Attorney General may be contacted at 441 4th Street NW #1100, Washington, D.C. 20001; 202-727-3400, and https://oag.dc.gov/consumer-protection.  MedQIA may be contacted by mail at 1171 S. Robertson Blvd., #414, Los Angeles, CA 90035.