Mississippi Sports Medicine and Orthopaedic Center (“MSMOC”) is committed to the privacy and security of our patients’ information. As part of this commitment, we are providing an update regarding a data security event that may affect some patient information. We understand that trust is paramount in the doctor-patient relationship, especially when dealing with sensitive health information at centers like ours, where many rely on the expertise of skilled Sports Medicine Doctors. This notice explains what happened, the actions we’ve taken, and steps you can take to protect yourself.
What Happened?
On March 9, 2022, MSMOC detected unusual activity on our computer network, including the unauthorized encryption of some data. We immediately took action to secure our network and launched a thorough investigation with cybersecurity experts to understand the nature and scope of the incident and restore our systems to full operation as quickly as possible.
The investigation revealed that an unauthorized party may have accessed and/or copied certain files from our network between March 3, 2022, and March 9, 2022. Furthermore, on March 11, 2022, we discovered that some patient records were inaccessible after restoring our medical records system from backups. Our physicians and staff worked diligently to recover and reconstruct as many patient records as possible using available information, including notes within patient charts.
Following this, we undertook a comprehensive and time-consuming review of the affected files to determine if they contained sensitive information and to identify the patients who might be impacted. This review has recently concluded, and we are now sending letters to potentially affected individuals.
Which Patients and What Information Was Affected?
The type of information potentially affected varies from person to person and is detailed in the letters being mailed to impacted individuals. It’s important to understand that not every patient was affected, and even among those affected, the types of information involved differ. If you received a letter, please refer to the “What Information Was Involved?” section of your letter for details specific to you. If you did not receive a letter but believe you might be affected, please contact our assistance line at the number provided in the “For More Information” section below.
The patient records that are inaccessible and unrecoverable are those created between February 28, 2022, and March 8, 2022. The types of records impacted may include: doctor’s notes and/or surgical notes, patient appointment records, X-ray, MRI, and/or surgical images, certain billing information, and prior authorization records.
The types of patient-related information potentially compromised due to the unauthorized network activity include: name, Social Security number, address, telephone number, email address, date of birth, medical record number, health plan beneficiary number, signature, and medical and/or clinical information such as diagnosis and treatment history, disability information, physician name, and health insurance information.
What We Are Doing
MSMOC is treating this incident and the security of your information with the utmost seriousness. Upon discovering the event, we acted immediately to restore our operations and enhance the security of our systems. Reflecting our ongoing dedication to protecting the personal information entrusted to us, we are reviewing our current policies and procedures and implementing additional administrative and technical safeguards to further secure the information within our systems. We have also notified federal law enforcement and the U.S. Department of Health and Human Services.
What Affected Individuals Can Do
We encourage all current and former MSMOC patients who may be affected to be vigilant against potential identity theft. Please review your account statements and explanations of benefits for any unusual activity and promptly report any suspicious activity to your insurance company, healthcare provider, or financial institution. Further details are provided below in the “Steps You Can Take to Help Protect Your Information” section and in the notification letters sent to affected individuals. Just as you rely on the expertise of your sports medicine doctor for your physical health, taking proactive steps to protect your personal information is crucial for your overall well-being.
For More Information
If you have any questions, please call our dedicated assistance line at (800) 624-9168, available Monday through Friday, 7:00 am CT – 5:00 pm CT. You can also write to us at:
MSMOC
1325 East Fortification St.
Jackson, MS 39202
Attn: Compliance Officer
STEPS YOU CAN TAKE TO HELP PROTECT YOUR INFORMATION
Monitor Your Accounts
Under U.S. law, you are entitled to one free credit report each year from each of the three major credit reporting agencies: Equifax, Experian, and TransUnion. To request your free credit report, please visit www.annualcreditreport.com or call toll-free at 1-877-322-8228. You can also contact the three major credit reporting bureaus directly using the information below to request a free copy of your credit report.
You have the right to place a “fraud alert” on your credit file at no cost, whether it’s an initial one-year alert or an extended seven-year alert if you are an identity theft victim. A fraud alert requires businesses to verify your identity before issuing new credit. To place a fraud alert, contact any of the three major credit reporting bureaus listed below.
Alternatively, you can place a “credit freeze” on your credit report, which prevents credit bureaus from releasing your credit information without your express authorization. This is designed to prevent unauthorized credit, loans, and services from being approved in your name. Be aware that using a credit freeze may delay or interfere with the timely approval of any new credit applications. Federal law prohibits charging a fee to place or lift a credit freeze. To request a security freeze, you will need to provide the following information:
- Full name (including middle initial and suffixes like Jr., Sr., II, III, etc.);
- Social Security number;
- Date of birth;
- Addresses for the past two to five years;
- Proof of current address (e.g., utility or phone bill);
- A legible photocopy of a government-issued ID (driver’s license, military ID, etc.); and
- If you are an identity theft victim, a copy of a police report, investigative report, or complaint to law enforcement.
To place a fraud alert or credit freeze, please contact the three major credit reporting bureaus:
| EQUIFAX | EXPERIAN | TRANSUNION |
|---|---|---|
| https://www.equifax.com/personal/credit-report-services/ | https://www.experian.com/help/ | https://www.transunion.com/credit-help |
| 1.888.298.0045 | 1.888.397.3742 | 1.833.395.6938 |
| Equifax Fraud Alert, P.O. Box 105069 Atlanta, GA 30348-5069 | Experian Fraud Alert, P.O. Box 9554, Allen, TX 75013 | TransUnion Fraud Alert, P.O. Box 2000, Chester, PA 19016 |
| Equifax Credit Freeze, P.O. Box 105788 Atlanta, GA 30348-5788 | Experian Credit Freeze, P.O. Box 9554, Allen, TX 75013 | TransUnion Credit Freeze, P.O. Box 160, Woodlyn, PA 19094 |
Additional Information
For further education on identity theft, fraud alerts, credit freezes, and steps to protect your personal information, contact the consumer reporting bureaus, the Federal Trade Commission (FTC), or your state Attorney General.
The Federal Trade Commission can be reached at:
600 Pennsylvania Avenue NW, Washington, DC 20580
www.identitytheft.gov
1-877-ID-THEFT (1-877-438-4338)
TTY: 1-866-653-4261
The FTC encourages those who find their information misused to file a complaint. Contact them using the information above for details on how to file a complaint. You also have the right to file a police report if you experience identity theft or fraud, and this usually requires proof of victimization. Report suspected identity theft to law enforcement and your state Attorney General. This notice was not delayed by law enforcement.
Contact Information for State Attorney Generals:
For Maryland residents:
Maryland Attorney General
200 St. Paul Place, 16th Floor, Baltimore, MD 21202
1-410-528-8662 or 1-888-743-0023
www.oag.state.md.us
For New York residents:
New York Attorney General
Office of the Attorney General, The Capitol, Albany, NY 12224-0341
1-800-771-7755
https://ag.ny.gov/
For North Carolina residents:
North Carolina Attorney General
9001 Mail Service Center, Raleigh, NC 27699-9001
1-877-566-7226 or 1-919-716-6000
www.ncdoj.gov
