Prima Pediatrics Announces a HIPAA Security Incident
CANYON COUNTRY, CA – June 24, 2021
On April 26, 2021, Prima Pediatrics (“we” or “Prima Pediatrics”) learned a few of its computer systems were infected with malware. As described below, we have taken prompt steps to investigate and remediate the incident. We greatly value our patients and the privacy and security of their information, and apologize for any inconvenience this may cause.
We investigated the incident. We discovered the malware rendered a few of our computer systems inoperable and the data stored on those systems inaccessible. We believe most of the data stored on the compromised systems was encrypted and we have received no information as of this publication suggesting that any patient information has been used for an improper purpose. We also found no evidence the data was removed from our systems.
The data on the compromised systems may have included unsecured protected health information (PHI) such as patient medical conditions and diagnoses and medical history.
As with most data incidents, patients, parents, and guardians should remain vigilant and consider taking steps such as only sharing your health insurance cards with your health care providers and other family members who are covered under your insurance plan or who help you with your medical care. You also should review your “explanation of benefits statement” which you receive from your health insurance company. Follow up with your insurance company or care provider for any items you do not recognize. Ask your insurance company for a current year-to-date report of all services paid for you as a beneficiary.
Prima Pediatrics treats all sensitive patient information in a confidential manner and is proactive in the careful handling of such information. We are assessing and modifying our privacy and data security policies and procedures to prevent similar situations from occurring in the future. If you have any further questions, please contact our compliance officer at firstname.lastname@example.org.