Johnson Memorial Hospital - Notice of Data Event

Johnson Memorial Hospital (“JMH”) is providing notice of a recent event that took place on the system of Reid and Riege, P.C. (“R&R”), a third-party law firm, and may affect the privacy of information of certain patients JMH. This notification provides information about the event, R&R’s and JMH’s response to it, and resources available to individuals to help protect their information, should they feel it necessary to do so.

What Happened? JMH has been provided with the following from R&R about the event. On or around March 21, 2022, R&R became aware of attempts at suspicious activity on its computer network. R&R immediately moved to secure its network and believed the incident had been contained. R&R immediately launched an investigation, with the assistance of third-party computer forensic specialists, and determined that its network had been infected with malware from an outside source which prevented access to certain files on the system. On May 27, 2022, R&R notified JMH that this data security incident resulted in the potential for unauthorized access to certain R&R systems containing JMH’s data between March 21, 2022 and March 27, 2022. R&R also advised JMH that the computer forensic specialist was continuing its investigation to determine the nature and scope of this potential access. After the conclusion of the investigation, on July 18, 2022, R&R confirmed to JMH that certain data belonging to JMH was subject to unauthorized access by an outside source. Out of an abundance of caution, JMH has decided to notify all individuals who potentially had data on the R&R systems at the time of the event by this publication.

What Information Was Involved? While the specific data elements vary for each potentially affected individual, and it is important to note that no potentially affected individual would have had all of the data elements listed below present in the impacted files, the scope of information potentially involved includes name, date of birth, medical treatment/diagnosis information, health insurance information, and other medical information for patients who received pharmacy services at JMH. JMH confirmed these patients treated on or before August 1, 2014. At this time, JMH has no indication that patient information was subject to actual or attempted misuse of information as a result of this incident.

What Is Being Done? JMH has been advised by R&R that upon R&R’s learning of this incident, R&R moved quickly to investigate and respond. Upon discovery, R&R promptly commenced an investigation with the assistance of third-party cyber security specialists to confirm the nature and scope of this incident. This investigation and response included confirming the security of R&R’s systems, reviewing the contents of relevant data for sensitive information, and notifying impacted persons associated with that sensitive information. R&R has further advised JMH that as part of R&R’s ongoing commitment to the privacy of personal information in its care, R&R is reviewing its policies procedures and processes related to the storage and access of personal information to reduce the likelihood of a similar future event. R&R will also be notifying applicable regulatory authorities, as required by law.

What You Can Do. If anyone contacts you purporting to be from JMH, Trinity Health Of New England (“THOfNE”), or R&R, we ask that you end the call or not write back to them. Instead, please use the contact information provided below. We ask that you be suspicious of anyone who contacts you purporting to be from JMH, THOfNE or R&R. We encourage you to remain vigilant against incidents of identity theft and fraud by reviewing your account statements, explanation of benefits for suspicious activity.

For More Information. JMH regrets any concern that R&R’s incident may cause. If individuals have questions about the incident or believe they may be impacted by this incident, they may contact R&R’s toll-free assistance line at (877) 890-9284. Individuals may also write to R&R at 755 Main Street, 21st Floor, Hartford, Connecticut, 06103.