TMCnet News
Luque Chiropractic, Inc. Provides Notice of Data Security IncidentWATSONVILLE, Calif., Nov. 17, 2016 /PRNewswire/ -- Luque Chiropractic, Inc. on behalf of itself and Watsonville Chiropractic, Inc. (David W. Christie, D.C.) (collectively "Luque") today announced a data incident affecting the security of certain patient records. On September 18, 2016, Luque was notified by its billing software company that its Amazon "S3" storage account was vulnerable because it was accessible to persons outside their organization, and that a security researcher accessed and downloaded information from the storage account. This storage account contained, among other things, protected health information of certain Luque Chiropractic, Inc. and Watsonville Chiropractic, Inc. (David W. Christie, D.C.) patients. The billing software company immediately took steps to secure the storage account and launched an investigation to determine to what extent sensitive information was accessed or acquired. They determined that the storage account was vulnerable from May, 2016 to September 11, 2016 and that information was accessed and downloaded by the security researcher on or around September 10, 2016. However, there are no indications that any fraud has resulted from this incident. "We take any threat to the security of information entrusted to us very seriously," said Dr. Fernando Luque, D.C. of Luque Chiropractic, Inc. "Once the error was discovered, we worked with the billing software company to ensure that access to the storage account was restricted and that proper access credentials are in place." Dr. Luque added, "We apologize for any inconvenience or concern this incident may cause our patients." Information Compromised While Luque has no indications that any fraud has resulted from this incident, it has confirmed that the data affected by this incident possibly includes patient names, addresses, diagnoses, dates of birth, treatment locations, treatment dates, and Social Security numbers. Not all patients had the same types of information affected. Notification Luque has provided a telephone line for anyone seeking additional information regarding this incident, as well as steps to better protect against identity theft. This line can be reached at 844-418-6630, Monday – Friday, 9 a.m. – 6 p.m. PST, excluding major holidays. In addition, Luque will be mailing letters directly to clients potentially affected by this incident. Identity Protection Services While Luque is unaware of any actual or attempted misuse of client personal information, it is offering those individuals potentially affected by this incident the option to enroll in credit monitoring and identity restoration services with Equifax. Instructions on how to enroll are included in the letters mailed to affected individuals. Fraud Prevention Tips Luque encourages everyone affected by this incident to remain vigilant against identity theft. Steps include:
To view the original version on PR Newswire, visit:http://www.prnewswire.com/news-releases/luque-chiropractic-inc-provides-notice-of-data-security-incident-300365443.html SOURCE Luque Chiropractic, Inc. |