San Diego Family Care (SDFC) recently discovered a data security incident
NOTICE OF SECURITY INCIDENT
Notice of Security Incident
San Diego Family Care (SDFC) recently discovered a data security incident that may have impacted
personal and protected health information belonging to certain current and former San Diego Family
Care patients and employees. SDFC has sent notification of this incident to potentially impacted
individuals for whom SDFC had contact information and has provided resources to assist them.
What Happened
In December 2020, SDFC and its business associate, Health Center Partners of Southern California (HCP),
became aware that our information technology hosting provider experienced a data security incident
that resulted in the encryption of certain data. The hosting provider took steps to secure and restore its
systems and launched an investigation with the assistance of computer forensics experts. At that time,
SDFC did not know what, if any, data belonging to SDFC or HCP may have been involved in the incident.
On January 20, 2021, we learned that, based on our hosting provider’s investigation into the incident,
certain SDFC and HCP data may have been accessed or acquired by an unauthorized individual. We
obtained a copy of the impacted data and engaged experts to conduct a thorough review to identify
individuals whose information may have been involved in the incident. That review concluded on April
12, 2021.
Please note that this unauthorized access was limited to systems related to insurance claims, and did
not affect any other SDFC information systems, such as our electronic medical record system. We have
no evidence that any personal or protected information was misused.
What Information Was Involved
Based on SDFC and HCP’s review, the following personal and protected health information may have
been involved in this incident: individuals' names, Social Security numbers or other government
identification numbers, financial account numbers, dates of birth, medical diagnosis or treatment
information, health insurance information, and/or client identification numbers. However, not all of
these data elements were affected for all individuals.
What Are We Doing
SDFC sent notification letters to the potentially impacted individuals on May 7, 2021. These letters
include information about steps that individuals can take to protect their information.
SDFC has also established a toll-free call center to answer questions about the incident and to address
related concerns. Call center representatives are available Monday through Friday from 6:00 a.m. – 6:00
p.m. Pacific Time and can be reached at (833) 664-1997.
SDFC is working with its hosting provider to ensure that appropriate remediation measures are taken to
reduce the likelihood of a similar incident occurring in the future.
What You Can Do
Please see the guide below on Identity Theft Protection Information which describes ways you can
protect your information, how to manage your credit report and how to navigate other specific, related
circumstances.
Notice of Security Incident
San Diego Family Care (SDFC) recently discovered a data security incident that may have impacted
personal and protected health information belonging to certain current and former San Diego Family
Care patients and employees. SDFC has sent notification of this incident to potentially impacted
individuals for whom SDFC had contact information and has provided resources to assist them.
What Happened
In December 2020, SDFC and its business associate, Health Center Partners of Southern California (HCP),
became aware that our information technology hosting provider experienced a data security incident
that resulted in the encryption of certain data. The hosting provider took steps to secure and restore its
systems and launched an investigation with the assistance of computer forensics experts. At that time,
SDFC did not know what, if any, data belonging to SDFC or HCP may have been involved in the incident.
On January 20, 2021, we learned that, based on our hosting provider’s investigation into the incident,
certain SDFC and HCP data may have been accessed or acquired by an unauthorized individual. We
obtained a copy of the impacted data and engaged experts to conduct a thorough review to identify
individuals whose information may have been involved in the incident. That review concluded on April
12, 2021.
Please note that this unauthorized access was limited to systems related to insurance claims, and did
not affect any other SDFC information systems, such as our electronic medical record system. We have
no evidence that any personal or protected information was misused.
What Information Was Involved
Based on SDFC and HCP’s review, the following personal and protected health information may have
been involved in this incident: individuals' names, Social Security numbers or other government
identification numbers, financial account numbers, dates of birth, medical diagnosis or treatment
information, health insurance information, and/or client identification numbers. However, not all of
these data elements were affected for all individuals.
What Are We Doing
SDFC sent notification letters to the potentially impacted individuals on May 7, 2021. These letters
include information about steps that individuals can take to protect their information.
SDFC has also established a toll-free call center to answer questions about the incident and to address
related concerns. Call center representatives are available Monday through Friday from 6:00 a.m. – 6:00
p.m. Pacific Time and can be reached at (833) 664-1997.
SDFC is working with its hosting provider to ensure that appropriate remediation measures are taken to
reduce the likelihood of a similar incident occurring in the future.
What You Can Do
Please see the guide below on Identity Theft Protection Information which describes ways you can
protect your information, how to manage your credit report and how to navigate other specific, related
circumstances.
