February 5, 2021

A Notice to Our Patients

Faith Regional Health Services (“FRHS”) values the privacy and security of our patients’ information.  Regrettably, this notice concerns a security incident that may have involved some of that information for a limited number of patients.
The Nebraska Medical Center (“Nebraska Medicine”) provides some operational services to FRHS and, as a part of those services, creates and maintains a limited number of documents containing our patients’ information.
On September 20, 2020, Nebraska Medicine identified unusual network activity that affected some of its IT systems.  Immediately upon learning of the incident, Nebraska Medicine initiated its incident response protocols to minimize any disruption to patients, isolated potentially impacted devices, and shut off certain systems as a precaution.  Nebraska Medicine also initiated an investigation, engaged computer forensic experts to assist with its ongoing investigation, and notified law enforcement.
Based on the findings of the investigation, Nebraska Medicine confirmed that an unauthorized person gained access to certain systems on the network between August 27, 2020 and September 20, 2020. During that time, the unauthorized person deployed malware and acquired copies of some patients’ information held on those systems.  Nebraska Medicine conducted a thorough review of the documents involved and, on January 11, 2021, confirmed that a small number of documents reflected FRHS patient information.  The documents may have included patient demographic information (such as a patient’s name, address, date of birth, medical record number), provider name, diagnosis codes, health insurance information, and/or, in some cases, financial information (such as a Social Security number and/or a financial account number).
This incident did not affect all FRHS patients; only those patients whose information was included in the affected documents.
Nebraska Medicine has no indication that any patient information has been used to commit fraud as a result of this incident. However, in an abundance of caution, Nebraska Medicine is notifying impacted patients on our behalf and providing them with guidance on how they can help protect their information.  Nebraska Medicine also established a dedicated, toll-free call center to answer patients’ questions.  If you have questions, please call 1-855-763-0482, available between 8:00 am and 5:30 pm, Central Time, Monday through Friday.  Nebraska Medicine is providing patients whose Social Security numbers were involved complimentary credit monitoring and identity theft protection services.  We and Nebraska Medicine also recommend that affected patients review any statements they receive from their health care providers and health insurers and notify them immediately if they see any charges for services not received.
We deeply regret that this incident occurred and for any concern this may cause.  To help prevent something like this from happening again we are working with Nebraska Medicine to help ensure that systems are adequately protected.