Alameda Health System - breach notification
B-81
Alameda Health System
Mail Handling Services
777 E. Park Dr
Harrisburg, PA 17111
June 24, 2022
Dear :
Alameda Health System (“AHS”) values and respects the privacy of your information, which is why we are writing to
advise you of a recent incident that may have involved some of your personal information. Please visit our website for
more information in Spanish and Mandarin. Para obtener más informacion en español, visite nuestro sitio web
www.alamedahealthsystem.org. 更多中文信息请访问我们的网站 www.alamedahealthsystem.org.
Although we have no reason to believe that any of your personal information has been misused for the purpose of
committing fraud or identity theft, we are writing to advise you about the steps that we have taken to address this incident
and provide you with guidance on what you can do to protect yourself.
On February 23, 2022, we became aware of suspicious activity involving one of our employee’s email accounts. Upon
learning of the incident, we immediately took action to secure the account. We also launched an investigation and
engaged a leading forensic security firm to assist in our investigation. On March 22, 2022, we determined that
unauthorized third parties from outside AHS were able to remotely access the email accounts of several AHS employees.
The access occurred, depending on the account, from May 2020 to March 2022. We then searched for any personal
information in the email accounts that could have been viewed and, on May 18, 2022, we learned that some of your
information was contained in the accounts. The type of information varied for each individual, but may have included
your name, date of birth, patient ID, clinical or treatment information, health insurance or claims information, Social
Security number and driver’s license number.
We take our responsibility to safeguard patients’ personal information seriously and apologize for any inconvenience or
concern this incident might cause. We will continue to remain on our guard against these types of attacks to protect the
safety of our patients and the security of their information. We are also offering a complimentary one-year membership
of Experian IdentityWorksSM Credit 3B. This product helps detect possible misuse of your personal information and
provides you with identity protection services focused on immediate identification and resolution of identity theft.
IdentityWorks Credit 3B is completely free to you and enrolling in this program will not hurt your credit score. For more
information on identity theft prevention and IdentityWorks Credit 3B, including instructions on how to activate
your complimentary, one-year membership, please see the additional information attached to this letter.
For additional information and assistance, please call 888-601-0890 between 8:00 am and 5:00 pm Pacific Time, Monday
through Friday.
Sincerely,
Akemi Renn
Interim, VP Compliance and Internal Audit
ACTIVATING YOUR COMPLIMENTARY CREDIT MONITORING
To help protect your identity, we are offering a complimentary one-year membership of Experian IdentityWorksSM Credit
3B. This product helps detect possible misuse of your personal information and provides you with superior identity
protection support focused on immediate identification and resolution of identity theft.
Activate IdentityWorks Credit 3B Now in Three Easy Steps
1. ENROLL by: 09/04/2022 (Your code will not work after this date.)
2. Visit the Experian IdentityWorks website to enroll: https://www.experianidworks.com/3bcredit
3. PROVIDE the Activation Code:
If you have questions about the product, need assistance with identity restoration or would like an alternative to enrolling in
Experian IdentityWorks online, please contact Experian’s customer care team at 877-288-8057. Be prepared to provide
engagement number as proof of eligibility for the identity restoration services by Experian.
ADDITIONAL DETAILS REGARDING YOUR 12-MONTH EXPERIAN IDENTITYWORKS CREDIT 3B
MEMBERSHIP:
A credit card is not required for enrollment in Experian IdentityWorks Credit 3B.
You can contact Experian immediately regarding any fraud issues, and have access to the following features once you
enroll in Experian IdentityWorks:
▪ Experian credit report at signup: See what information is associated with your credit file. Daily credit reports
are available for online members only.*
▪ Credit Monitoring: Actively monitors Experian, Equifax and Transunion files for indicators of fraud.
▪ Identity Restoration: Identity Restoration specialists are immediately available to help you address credit and
non-credit related fraud.
▪ Experian IdentityWorks ExtendCARETM: You receive the same high-level of Identity Restoration support
even after your Experian IdentityWorks membership has expired.
▪ Up to $1 Million Identity Theft Insurance**: Provides coverage for certain costs and unauthorized electronic
fund transfers.
Activate your membership today at https://www.experianidworks.com/3bcredit
or call 877-288-8057 to register with the activation code above.
What you can do to protect your information: There are additional actions you can consider taking to reduce the chances
of identity theft or fraud on your account(s). Please refer to www.ExperianIDWorks.com/restoration for this information.
If you have any questions about IdentityWorks, need help understanding something on your credit report or suspect that an
item on your credit report may be fraudulent, please contact Experian’s customer care team at 877-288-8057.
* Offline members will be eligible to call for additional reports quarterly after enrolling. ** The Identity Theft Insurance is
underwritten and administered by American Bankers Insurance Company of Florida, an Assurant company. Please refer to
the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.
Additional Important Information
As a precautionary measure, we recommend that you remain vigilant to protect against potential fraud and/or identity
theft by, among other things, reviewing your account statements and monitoring credit reports closely. If you detect any
suspicious activity on an account, you should promptly notify the financial institution or company with which the account
is maintained. You should also promptly report any fraudulent activity or any suspected incidents of identity theft to
proper law enforcement authorities, including the police and your state’s attorney general, as well as the Federal Trade
Commission (“FTC”).
You may wish to review the tips provided by the FTC on fraud alerts, security/credit freezes and steps to you can take to
avoid identity theft. For more information and to contact the FTC, please visit www.ftc.gov/idtheft or call 1-877-IDTHEFT (1-877-438-4338). You may also contact the FTC at: Federal Trade Commission, 600 Pennsylvania Avenue,
NW, Washington, DC 20580.
Credit Reports: You may obtain a free copy of your credit report once every 12 months from each of the three national
credit reporting agencies by visiting http://www.annualcreditreport.com, by calling toll-free 1-877-322-8228, or by
completing an Annual Credit Report Request Form and mailing it to Annual Credit Report Request
Service, P.O. Box 105281, Atlanta, GA 30348. You can print a copy of the request form at
https://www.annualcreditreport.com/cra/requestformfinal.pdf.
Alternatively, you may elect to purchase a copy of your credit report by contacting one of the three national credit
reporting agencies. Contact information for the three national credit reporting agencies for the purpose of requesting a
copy of your credit report or for general inquiries, including obtaining information about fraud alerts and placing a
security freeze on your credit files, is as follows:
Equifax
1-800-349-9960
www.equifax.com
P.O. Box 105788
Atlanta, GA 30348
Experian
1-888-397-3742
www.experian.com
P.O. Box 9554
Allen, TX 75013
TransUnion
1-888-909-8872
www.transunion.com
P.O. Box 2000
Chester, PA 19022
Fraud Alerts: You may want to consider placing a fraud alert on your credit report. An initial fraud alert is free and
will stay on your credit file for at least 90 days. The alert informs creditors of possible fraudulent activity within your
report and requests that the creditor contact you prior to establishing any new accounts in your name. To place a fraud
alert on your credit report, contact any of the three national credit reporting agencies using the contact information listed
above. Additional information is available at http://www.annualcreditreport.com.
Credit and Security Freezes: You may have the right to place a credit freeze, also known as a security freeze, on your
credit file, so that no new credit can be opened in your name without the use of a PIN number that is issued to you when
you initiate the freeze. A credit freeze is designed to prevent potential credit grantors from accessing your credit report
without your consent. If you place a credit freeze, potential creditors and other third parties will not be able to get access
to your credit report unless you temporarily lift the freeze. Therefore, using a credit freeze may delay your ability to
obtain credit. Unlike a fraud alert, you must separately place a credit freeze on your credit file at each credit reporting
company. Since the instructions for how to establish a credit freeze differ from state to state, please contact the three
major credit reporting companies using the contact information above.
This notice was not delayed at the request of law enforcement.
District of Columbia Residents: District of Columbia residents can contact the Office of the Attorney General to obtain
information about steps to take to avoid identity theft from the Office of the Attorney General for the District of Columbia
at 441 4th Street, NW, Washington, DC 20001, 202-727-3400, [email protected], https://oag.dc.gov/. The District of
Columbia law also allows consumers to place a security freeze on their credit reports without any charge.
Iowa Residents: Iowa residents can contact the Office of the Attorney General to obtain information about steps to take
to avoid identity theft from the Iowa Attorney General’s office at: Office of the Attorney General of Iowa, Hoover State
Office Building, 1305 E. Walnut Street, Des Moines IA 50319, 515-281-5164.
Maryland Residents: Maryland residents can contact the Office of the Attorney General to obtain information about
steps you can take to avoid identity theft from the Maryland Attorney General’s office at: Office of the Attorney General,
200 St. Paul Place, Baltimore, MD 21202, (888) 743-0023, http://www.marylandattorneygeneral.gov/.
New Mexico Residents: New Mexico residents have rights pursuant to the Fair Credit Reporting Act, such as the right
to be told if information in your credit file has been used against you, the right to know what is in your credit file, the
right to ask for your credit score, and the right to dispute incomplete or inaccurate information. Further, pursuant to the
Fair Credit Reporting Act, the consumer reporting agencies must correct or delete inaccurate, incomplete, or unverifiable
information; consumer reporting agencies may not report outdated negative information; access to your file is limited;
you must give your consent for credit reports to be provided to employers; you may limit “prescreened” offers of credit
and insurance you get based on information in your credit report; and you may seek damages from violators. You may
have additional rights under the Fair Credit Reporting Act not summarized here. Identity theft victims and active duty
military personnel have specific additional rights pursuant to the Fair Credit Reporting Act. We encourage you to review
your rights pursuant to the Fair Credit Reporting Act by visiting
www.consumerfinance.gov/f/201504_cfpb_summary_your-rights-under-fcra.pdf or by writing Consumer Response
Center, Room 130-A, Federal Trade Commission, 600 Pennsylvania Ave. N.W., Washington, D.C. 20580.
North Carolina Residents: North Carolina residents can obtain information about preventing identity theft from the
North Carolina Attorney General’s Office at: North Carolina Attorney General's Office, Consumer Protection Division,
9001 Mail Service Center, Raleigh, NC 27699-9001; 877-5-NO-SCAM (Toll-free within North Carolina); 919-716-6000;
www.ncdoj.gov.
Alameda Health System
Mail Handling Services
777 E. Park Dr
Harrisburg, PA 17111
June 24, 2022
Dear :
Alameda Health System (“AHS”) values and respects the privacy of your information, which is why we are writing to
advise you of a recent incident that may have involved some of your personal information. Please visit our website for
more information in Spanish and Mandarin. Para obtener más informacion en español, visite nuestro sitio web
www.alamedahealthsystem.org. 更多中文信息请访问我们的网站 www.alamedahealthsystem.org.
Although we have no reason to believe that any of your personal information has been misused for the purpose of
committing fraud or identity theft, we are writing to advise you about the steps that we have taken to address this incident
and provide you with guidance on what you can do to protect yourself.
On February 23, 2022, we became aware of suspicious activity involving one of our employee’s email accounts. Upon
learning of the incident, we immediately took action to secure the account. We also launched an investigation and
engaged a leading forensic security firm to assist in our investigation. On March 22, 2022, we determined that
unauthorized third parties from outside AHS were able to remotely access the email accounts of several AHS employees.
The access occurred, depending on the account, from May 2020 to March 2022. We then searched for any personal
information in the email accounts that could have been viewed and, on May 18, 2022, we learned that some of your
information was contained in the accounts. The type of information varied for each individual, but may have included
your name, date of birth, patient ID, clinical or treatment information, health insurance or claims information, Social
Security number and driver’s license number.
We take our responsibility to safeguard patients’ personal information seriously and apologize for any inconvenience or
concern this incident might cause. We will continue to remain on our guard against these types of attacks to protect the
safety of our patients and the security of their information. We are also offering a complimentary one-year membership
of Experian IdentityWorksSM Credit 3B. This product helps detect possible misuse of your personal information and
provides you with identity protection services focused on immediate identification and resolution of identity theft.
IdentityWorks Credit 3B is completely free to you and enrolling in this program will not hurt your credit score. For more
information on identity theft prevention and IdentityWorks Credit 3B, including instructions on how to activate
your complimentary, one-year membership, please see the additional information attached to this letter.
For additional information and assistance, please call 888-601-0890 between 8:00 am and 5:00 pm Pacific Time, Monday
through Friday.
Sincerely,
Akemi Renn
Interim, VP Compliance and Internal Audit
ACTIVATING YOUR COMPLIMENTARY CREDIT MONITORING
To help protect your identity, we are offering a complimentary one-year membership of Experian IdentityWorksSM Credit
3B. This product helps detect possible misuse of your personal information and provides you with superior identity
protection support focused on immediate identification and resolution of identity theft.
Activate IdentityWorks Credit 3B Now in Three Easy Steps
1. ENROLL by: 09/04/2022 (Your code will not work after this date.)
2. Visit the Experian IdentityWorks website to enroll: https://www.experianidworks.com/3bcredit
3. PROVIDE the Activation Code:
If you have questions about the product, need assistance with identity restoration or would like an alternative to enrolling in
Experian IdentityWorks online, please contact Experian’s customer care team at 877-288-8057. Be prepared to provide
engagement number as proof of eligibility for the identity restoration services by Experian.
ADDITIONAL DETAILS REGARDING YOUR 12-MONTH EXPERIAN IDENTITYWORKS CREDIT 3B
MEMBERSHIP:
A credit card is not required for enrollment in Experian IdentityWorks Credit 3B.
You can contact Experian immediately regarding any fraud issues, and have access to the following features once you
enroll in Experian IdentityWorks:
▪ Experian credit report at signup: See what information is associated with your credit file. Daily credit reports
are available for online members only.*
▪ Credit Monitoring: Actively monitors Experian, Equifax and Transunion files for indicators of fraud.
▪ Identity Restoration: Identity Restoration specialists are immediately available to help you address credit and
non-credit related fraud.
▪ Experian IdentityWorks ExtendCARETM: You receive the same high-level of Identity Restoration support
even after your Experian IdentityWorks membership has expired.
▪ Up to $1 Million Identity Theft Insurance**: Provides coverage for certain costs and unauthorized electronic
fund transfers.
Activate your membership today at https://www.experianidworks.com/3bcredit
or call 877-288-8057 to register with the activation code above.
What you can do to protect your information: There are additional actions you can consider taking to reduce the chances
of identity theft or fraud on your account(s). Please refer to www.ExperianIDWorks.com/restoration for this information.
If you have any questions about IdentityWorks, need help understanding something on your credit report or suspect that an
item on your credit report may be fraudulent, please contact Experian’s customer care team at 877-288-8057.
* Offline members will be eligible to call for additional reports quarterly after enrolling. ** The Identity Theft Insurance is
underwritten and administered by American Bankers Insurance Company of Florida, an Assurant company. Please refer to
the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.
Additional Important Information
As a precautionary measure, we recommend that you remain vigilant to protect against potential fraud and/or identity
theft by, among other things, reviewing your account statements and monitoring credit reports closely. If you detect any
suspicious activity on an account, you should promptly notify the financial institution or company with which the account
is maintained. You should also promptly report any fraudulent activity or any suspected incidents of identity theft to
proper law enforcement authorities, including the police and your state’s attorney general, as well as the Federal Trade
Commission (“FTC”).
You may wish to review the tips provided by the FTC on fraud alerts, security/credit freezes and steps to you can take to
avoid identity theft. For more information and to contact the FTC, please visit www.ftc.gov/idtheft or call 1-877-IDTHEFT (1-877-438-4338). You may also contact the FTC at: Federal Trade Commission, 600 Pennsylvania Avenue,
NW, Washington, DC 20580.
Credit Reports: You may obtain a free copy of your credit report once every 12 months from each of the three national
credit reporting agencies by visiting http://www.annualcreditreport.com, by calling toll-free 1-877-322-8228, or by
completing an Annual Credit Report Request Form and mailing it to Annual Credit Report Request
Service, P.O. Box 105281, Atlanta, GA 30348. You can print a copy of the request form at
https://www.annualcreditreport.com/cra/requestformfinal.pdf.
Alternatively, you may elect to purchase a copy of your credit report by contacting one of the three national credit
reporting agencies. Contact information for the three national credit reporting agencies for the purpose of requesting a
copy of your credit report or for general inquiries, including obtaining information about fraud alerts and placing a
security freeze on your credit files, is as follows:
Equifax
1-800-349-9960
www.equifax.com
P.O. Box 105788
Atlanta, GA 30348
Experian
1-888-397-3742
www.experian.com
P.O. Box 9554
Allen, TX 75013
TransUnion
1-888-909-8872
www.transunion.com
P.O. Box 2000
Chester, PA 19022
Fraud Alerts: You may want to consider placing a fraud alert on your credit report. An initial fraud alert is free and
will stay on your credit file for at least 90 days. The alert informs creditors of possible fraudulent activity within your
report and requests that the creditor contact you prior to establishing any new accounts in your name. To place a fraud
alert on your credit report, contact any of the three national credit reporting agencies using the contact information listed
above. Additional information is available at http://www.annualcreditreport.com.
Credit and Security Freezes: You may have the right to place a credit freeze, also known as a security freeze, on your
credit file, so that no new credit can be opened in your name without the use of a PIN number that is issued to you when
you initiate the freeze. A credit freeze is designed to prevent potential credit grantors from accessing your credit report
without your consent. If you place a credit freeze, potential creditors and other third parties will not be able to get access
to your credit report unless you temporarily lift the freeze. Therefore, using a credit freeze may delay your ability to
obtain credit. Unlike a fraud alert, you must separately place a credit freeze on your credit file at each credit reporting
company. Since the instructions for how to establish a credit freeze differ from state to state, please contact the three
major credit reporting companies using the contact information above.
This notice was not delayed at the request of law enforcement.
District of Columbia Residents: District of Columbia residents can contact the Office of the Attorney General to obtain
information about steps to take to avoid identity theft from the Office of the Attorney General for the District of Columbia
at 441 4th Street, NW, Washington, DC 20001, 202-727-3400, [email protected], https://oag.dc.gov/. The District of
Columbia law also allows consumers to place a security freeze on their credit reports without any charge.
Iowa Residents: Iowa residents can contact the Office of the Attorney General to obtain information about steps to take
to avoid identity theft from the Iowa Attorney General’s office at: Office of the Attorney General of Iowa, Hoover State
Office Building, 1305 E. Walnut Street, Des Moines IA 50319, 515-281-5164.
Maryland Residents: Maryland residents can contact the Office of the Attorney General to obtain information about
steps you can take to avoid identity theft from the Maryland Attorney General’s office at: Office of the Attorney General,
200 St. Paul Place, Baltimore, MD 21202, (888) 743-0023, http://www.marylandattorneygeneral.gov/.
New Mexico Residents: New Mexico residents have rights pursuant to the Fair Credit Reporting Act, such as the right
to be told if information in your credit file has been used against you, the right to know what is in your credit file, the
right to ask for your credit score, and the right to dispute incomplete or inaccurate information. Further, pursuant to the
Fair Credit Reporting Act, the consumer reporting agencies must correct or delete inaccurate, incomplete, or unverifiable
information; consumer reporting agencies may not report outdated negative information; access to your file is limited;
you must give your consent for credit reports to be provided to employers; you may limit “prescreened” offers of credit
and insurance you get based on information in your credit report; and you may seek damages from violators. You may
have additional rights under the Fair Credit Reporting Act not summarized here. Identity theft victims and active duty
military personnel have specific additional rights pursuant to the Fair Credit Reporting Act. We encourage you to review
your rights pursuant to the Fair Credit Reporting Act by visiting
www.consumerfinance.gov/f/201504_cfpb_summary_your-rights-under-fcra.pdf or by writing Consumer Response
Center, Room 130-A, Federal Trade Commission, 600 Pennsylvania Ave. N.W., Washington, D.C. 20580.
North Carolina Residents: North Carolina residents can obtain information about preventing identity theft from the
North Carolina Attorney General’s Office at: North Carolina Attorney General's Office, Consumer Protection Division,
9001 Mail Service Center, Raleigh, NC 27699-9001; 877-5-NO-SCAM (Toll-free within North Carolina); 919-716-6000;
www.ncdoj.gov.
