Victory Health Partners’ Patient data breach
Patient name
Address
City, State Zip
Dear Victory Health Partners’ Patient,
We are writing this letter to you with important information regarding a recent incident of your
personal information on file with Victory Health Partners. On Thursday, September 23, 2021, Victory
became aware of a ransomware event on its computer systems, which resulted in the potential release
of personal health information of some of its patients. In particular, we learned that your personal
information, including possibly your name, address, social security number, date of birth, and other
protected information, may have been possibly accessed by a third-party through our computer
systems. As of today, we have not received any indication that your protected information has been
further released to the public, but we are continuing to monitor the situation closely. As Victory utilizes
paper patient charts, there was no personal health information such as health conditions, diagnoses,
etc. that was compromised.
Upon our learning of the incident, we immediately initiated a shutdown of all of Victory’s computer
systems and began the process of investigating the event and to protect the clinic against further risk.
These actions include the initiation of a forensics security investigation into our systems; the filing of a
report with the Federal Bureau of Investigation and initiation of a criminal investigation; a thorough
review of our existing operating and IT systems; an analysis of changes to the system in order to
improve confidentiality and security of our records; and the hiring of an outside computer consultant
to advise the clinic on new systems and equipment that will be necessary to ensure against such
incidents in the future.
Because of the nature of the event, we would suggest that you immediately place a fraud alert on all
of your credit files to protect yourself from the possibility of identity theft. To initiate such an alert, we
would recommend that you contact one of the three major credit reporting agencies listed below. You
will receive letters from the contacted agency instructing you on how to obtain a free copy of your
credit report. Those agencies are as follows:
1. Equifax: (404) 885-8000
2. Experian: 1 (888) 397-3742
3. Transunion: 1 (855) 681-3196
Once you receive your credit report, we would suggest you review it carefully to verify that all
information is correct and that there are no accounts listed that you did not open, and furthermore
that you monitor your credit report for several months in order to ensure that no such fraud occurs.
We understand that this situation poses an inconvenience to you, and we sincerely apologize and
regret that this situation has occurred. Victory is committed to providing continued quality care to its
patients, which includes protecting your personal information, and we want to assure you that we have
policies and procedures in place to protect your privacy and will continue to strengthen those policies
to avoid such incidents in the future. If you have any questions about matter, please do not hesitate to
contact Victory’s Director, Kim Garrett, at 1.877.455.0036 and we will promptly respond to your
concerns.
Sincerely,
Robert D. Lightfoot, M.D.
Executive / Medical Director
Address
City, State Zip
Dear Victory Health Partners’ Patient,
We are writing this letter to you with important information regarding a recent incident of your
personal information on file with Victory Health Partners. On Thursday, September 23, 2021, Victory
became aware of a ransomware event on its computer systems, which resulted in the potential release
of personal health information of some of its patients. In particular, we learned that your personal
information, including possibly your name, address, social security number, date of birth, and other
protected information, may have been possibly accessed by a third-party through our computer
systems. As of today, we have not received any indication that your protected information has been
further released to the public, but we are continuing to monitor the situation closely. As Victory utilizes
paper patient charts, there was no personal health information such as health conditions, diagnoses,
etc. that was compromised.
Upon our learning of the incident, we immediately initiated a shutdown of all of Victory’s computer
systems and began the process of investigating the event and to protect the clinic against further risk.
These actions include the initiation of a forensics security investigation into our systems; the filing of a
report with the Federal Bureau of Investigation and initiation of a criminal investigation; a thorough
review of our existing operating and IT systems; an analysis of changes to the system in order to
improve confidentiality and security of our records; and the hiring of an outside computer consultant
to advise the clinic on new systems and equipment that will be necessary to ensure against such
incidents in the future.
Because of the nature of the event, we would suggest that you immediately place a fraud alert on all
of your credit files to protect yourself from the possibility of identity theft. To initiate such an alert, we
would recommend that you contact one of the three major credit reporting agencies listed below. You
will receive letters from the contacted agency instructing you on how to obtain a free copy of your
credit report. Those agencies are as follows:
1. Equifax: (404) 885-8000
2. Experian: 1 (888) 397-3742
3. Transunion: 1 (855) 681-3196
Once you receive your credit report, we would suggest you review it carefully to verify that all
information is correct and that there are no accounts listed that you did not open, and furthermore
that you monitor your credit report for several months in order to ensure that no such fraud occurs.
We understand that this situation poses an inconvenience to you, and we sincerely apologize and
regret that this situation has occurred. Victory is committed to providing continued quality care to its
patients, which includes protecting your personal information, and we want to assure you that we have
policies and procedures in place to protect your privacy and will continue to strengthen those policies
to avoid such incidents in the future. If you have any questions about matter, please do not hesitate to
contact Victory’s Director, Kim Garrett, at 1.877.455.0036 and we will promptly respond to your
concerns.
Sincerely,
Robert D. Lightfoot, M.D.
Executive / Medical Director
