DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Med Associates Provides Notice to Patients of Hack

Posted on June 15, 2018 by Dissent

Their press release of June 14:

Med Associates, Inc. processes claims for medical providers located in and around Albany, NY.  Med Associates, Inc. is providing notice of an incident that may have involved the security of patient’s information in its care. We have no evidence that any patient information was specifically accessed or used in any way. However, we are unable to definitively rule that out, therefore, we are notifying patients regarding the data incident and steps we have taken since discovery.

What Happened? On March 22, 2018, Med Associates became aware of unusual activity relating to an employee’s workstation occurring that same day. Med Associates immediately began investigating with our IT vendor and subsequently retained a leading third-party forensic investigation firm to assist with our investigation. It was determined that the unauthorized party accessed the workstation and through that, may have had access to certain personal and protected information.

What Information was Involved? While our investigation is ongoing, we have determined that the information that may have been accessible from the workstation included patient name, date of birth, address, dates of service, diagnosis codes, procedure codes and insurance information, including insurance ID Number.  There was no banking or credit card information contained on or accessible from the workstation.

What We Are Doing. The privacy and security of information in our possession is one of our highest priorities. Upon learning of this incident, we immediately secured the impacted workstation, implemented even more stringent information security standards and have increased staff training on data privacy and security.

Med Associates is also notifying patients who may be affected by this incident. In this notice, Med Associates is providing access to one (1) year of credit monitoring and identity restoration services through TransUnion at no cost to patients.

What You Can Do. Affected patients can review the notice letter they received, which contains information on what they can do to better protect against the possibility of identity theft and fraud should you feel it is appropriate to do so.

For More Information. We sincerely regret any inconvenience or concern this may have caused. Affected patients can call our dedicated assistance line at 855-206-9883, Monday through Friday, 9:00 a.m. to 9:00 p.m. ET for more information.

SOURCE Med Associates


Related:

  • Veradigm's Breach Claims Under Scrutiny After Dark Web Leak
  • UK: Woman charged after NHS patients' records accessed in data breach
  • Landmark civil penalty of AU$5.8 million issued under Australia’s Privacy Act
  • Legal Aid Agency chief admits difficulties understanding impact of cyberattack
  • Snowflake Loses Two More Bids to Dismiss Data Breach Plaintiffs
  • US company with access to biggest telecom firms uncovers breach by nation-state hackers
Category: HackHealth Data

Post navigation

← CHRISTUS Spohn notifying 1,800 patients: Medical records stolen in April theft
Canada Revenue Agency logs 2,338 privacy breaches in just under 2 years →

2 thoughts on “Med Associates Provides Notice to Patients of Hack”

  1. Michael D.Margiotta Jr. says:
    June 21, 2018 at 6:32 pm

    I recently received a letter about a data breach at Medical Associates Inc. that was discovered on March 22, 2018. Since I am a patient of a medical provider located in Albany NY, this was a warning that my personal information could have been compromised This letter contained instructions on how to obtain free credit
    monitoring for one year thru Transunion. Unfortunately I misplaced the letter before I could sign up for the service. The letter contained an activation code that was required to enroll in the service.

    The original letter came from Portland Oregon but I was not able to find an e-mail address for them.

    Could you please help to provide me with an activation code so I can enroll? My information is as follows:

    [deleted by DataBreaches.net]

    I would appreciate any help you can offer.

    Regards,
    Mike

    1. Dissent says:
      June 21, 2018 at 9:38 pm

      No, I can’t get you or anyone else any activation code. This is a one-person news site.

      You’ll have to call them and give your info and the name of your provider so they can tell you the activation code: 855-206-9883.

      Good luck.

Comments are closed.

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs
  • A jailed hacking kingpin reveals all about the gang that left a trail of destruction
  • Army gynecologist took secret videos of patients during intimate exams, lawsuit says

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs
  • Always watching: How ICE’s plan to monitor social media 24/7 threatens privacy and civic participation

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.