Notice of Data Breach
Cornerstone Healthcare Group Management Services, LLC (“Cornerstone”) is providing notification of a data security incident that involved unauthorized access to certain Cornerstone systems and data.
Cornerstone became aware of suspicious network activity in our IT environment in mid-December 2023. Once detected, we promptly launched an investigation, which ultimately confirmed that a data breach occurred on December 19, 2023. The breach affected data associated with certain healthcare facilities that Cornerstone supports or previously supported. In addition to containing the issue, we also notified law enforcement and engaged leading cybersecurity firms to assist in assessing the incident’s scope and cause. Importantly, this incident did not impact or disrupt the delivery of patient care at the affected facilities at any time.
During the course of our investigation, on May 30, 2024, we determined that personal information was among the data that was subject to unauthorized access. We completed a comprehensive data review and validation process, and subsequently notified individuals whose data was affected. Out of an abundance of caution, Cornerstone is offering credit monitoring and identity protection services to those who were impacted at no cost. In addition, Cornerstone is advising those who were impacted to stay vigilant and closely review and monitor their financial accounts, statements, credit reports and other financial information for any evidence of unusual activity, fraudulent charges or signs of identity theft.
Types of information that were subject to unauthorized access vary by individual but may include: name, Social Security number, date of birth, federal or state ID number, financial account information, credit or debit card information, digital signature, email address and password, username and password, passport number, medical or health information, health insurance information, and other protected health information.
Cornerstone’s priority is delivering high quality, compassionate care at its affiliated facilities. We took the appropriate steps to secure our systems following the incident and continue strengthening the security of our systems to further protect the privacy of the data entrusted to us.
Individuals with questions regarding this incident may contact 866-810-8106 between the hours of 9:00am – 6:30pm EST Monday through Friday, excluding major U.S. holidays.
###
ADDITIONAL INFORMATION
Please note that you can contact the Federal Trade Commission (“FTC”), your attorney general, and the national consumer reporting agencies for more information on fraud alerts, security freezes, and other steps you can take to avoid identity theft. The contact information for the three nationwide credit reporting companies is:
Equifax
P.O. Box 105788
Atlanta, GA 30374
888-298-0045
TransUnion
PO Box 2000
Chester, PA 19016
800-916-8800
Experian
PO Box 4500
Allen, TX 75013
1-888-397-3742
Additional information about these steps is included below. Please also note that you can report any suspected incidents of identity theft to law enforcement, your state’s attorney general, and the FTC. You may contact the Consumer Response Center at the FTC by calling 1-877-FTC-HELP (382-4357). In certain states, you may also obtain any police report filed about this issue. You can obtain information about fraud alerts and security freezes from the FTC and from credit reporting agencies. You also have other rights under the Fair Credit Reporting Act (“FCRA”). For further information about your rights under the FCRA, please visit https://files.consumerfinance.gov/f/201504_cfpb_summary_your-rights-under-fcra.pdf.
Additional Information for Connecticut, District of Columbia, Iowa, Maryland, New York, North Carolina, and Oregon Residents. You can obtain information about steps to prevent identity theft and/or report identity theft to your state Attorney General at:
- Connecticut Office of the Attorney General, 165 Capitol Avenue, Hartford, CT 06106, 860-808-5318, https://portal.ct.gov/ag
- Office of the Attorney General for the District of Columbia, 400 6th Street NW, Washington, D.C. 20001, 202-727-3400, https://oag.dc.gov/
- Office of the Attorney General of Iowa, Hoover State Office Building, 1305 E. Walnut St., Des Moines, IA 50319, 515-281-5926, http://www.iowaattorneygeneral.gov/
- Maryland Office of the Attorney General, 200 St. Paul Place, Baltimore, MD 21202, 888-743-0023 (toll-free in Maryland), www.marylandattorneygeneral.gov
- New York Office of the Attorney General, The Capitol, Albany, NY 12224-0341, 800-771-7755, https://ag.ny.gov
- North Carolina Attorney General’s Office, 9001 Mail Service Center, Raleigh, NC 27699-9001, 919-716-6400 (toll-free in North Carolina), www.ncdoj.gov
- Oregon Department of Justice, Consumer Protection, 1162 Court St. NE, Salem, OR 97301-4096, 877-877-9392 (toll-free), http://www.doj.state.or.us/