Email Hack Released PHI of Patients at Midwest Addiction Treatment Centers

2019, Breaches, January

Who: Valley Hope Association

What was affected: Patient data. Name, address, medication/prescription information, Social Security number, financial account information, driver’s license or state identification card number, patient claim/billing information, date of birth, health insurance information, the medical record number, and doctor’s name.

When it happened: October 2018

How it happened: An unauthorized user had logged into the employee’s e-mail account between Oct. 9-10, 2018, resulting in a risk of unauthorized access to the e-mail messages and file attachments stored on the e-mail account. Those messages and attachments may have potentially included sensitive personal information.

Outcome: To help protect against the potential misuse of personal information, Valley Hope is offering 12 months of credit monitoring and identity protection services at no cost to the affected individuals. Also, we have set up a resource page on our website with steps individuals can take to protect their identities.