NOTICE OF ATLANTA WOMEN’S HEALTH GROUP CYBERATTACK
NOTICE OF ATLANTA WOMEN’S HEALTH GROUP CYBERATTACK
On April 12, 2023, Atlanta Women’s Health Group (“AWHG”) identified anomalous activity on
its computer system. AWHG immediately took steps to isolate its networks and fully contain the
incident. AWHG, with the assistance of cybersecurity experts, proactively isolated the exposure
and launched an investigation into the nature and scope of the incident. The forensic investigation
was robust and ultimately determined that the unauthorized user accessed certain patient
information.
After AWHG confirmed that patient information was accessed, it launched an extensive and
thorough data mining effort to identify potentially affected individuals. Although there is no
evidence that any patient information has been improperly used, AWHG will be notifying the
individuals whose personal information was involved in the incident. For most patients, this
protected health information consists of patient name, date of birth, patient ID number, and other
information that may be contained in medical records. Please note that the actual protected health
information affected varies by individual and AWHG cannot confirm whether this information
was actually accessed or acquired by the unauthorized user.
AWHG values the privacy of all its patients, and we deeply regret that this incident occurred. Since
the incident, AWHG has worked extensively with outside security consultants to implement
additional cybersecurity measures to prevent a recurrence of such an attack and to continue
protecting the privacy of our valued patients. We appreciate our patients for entrusting us with
their care and rest assured that we remain committed to that care and to handling this unfortunate
situation to the best of our ability. We have also reported this incident to the U.S. Department of
Health and Human Services and the Federal Bureau of Investigation.
Although AWHG has notified all patients of this incident, only a subset of patients’ information
was actually affected by the event. Just because you have received notice of this event does not
mean your information was compromised. Any patient who wants additional information can use
the toll-free number 1-888-566-8248, Monday through Friday between 9 a.m. - 9 p.m. Eastern
Time.
Again, while AWHG is unaware of any actual or attempted misuse of protected health information
as a result of this incident, AWGH nevertheless encourages individuals to review credit reports,
health account statements, health insurance account records and explanations of benefit forms for
suspicious activity and report all suspicious activity to the institute that issued the record
immediately.
On April 12, 2023, Atlanta Women’s Health Group (“AWHG”) identified anomalous activity on
its computer system. AWHG immediately took steps to isolate its networks and fully contain the
incident. AWHG, with the assistance of cybersecurity experts, proactively isolated the exposure
and launched an investigation into the nature and scope of the incident. The forensic investigation
was robust and ultimately determined that the unauthorized user accessed certain patient
information.
After AWHG confirmed that patient information was accessed, it launched an extensive and
thorough data mining effort to identify potentially affected individuals. Although there is no
evidence that any patient information has been improperly used, AWHG will be notifying the
individuals whose personal information was involved in the incident. For most patients, this
protected health information consists of patient name, date of birth, patient ID number, and other
information that may be contained in medical records. Please note that the actual protected health
information affected varies by individual and AWHG cannot confirm whether this information
was actually accessed or acquired by the unauthorized user.
AWHG values the privacy of all its patients, and we deeply regret that this incident occurred. Since
the incident, AWHG has worked extensively with outside security consultants to implement
additional cybersecurity measures to prevent a recurrence of such an attack and to continue
protecting the privacy of our valued patients. We appreciate our patients for entrusting us with
their care and rest assured that we remain committed to that care and to handling this unfortunate
situation to the best of our ability. We have also reported this incident to the U.S. Department of
Health and Human Services and the Federal Bureau of Investigation.
Although AWHG has notified all patients of this incident, only a subset of patients’ information
was actually affected by the event. Just because you have received notice of this event does not
mean your information was compromised. Any patient who wants additional information can use
the toll-free number 1-888-566-8248, Monday through Friday between 9 a.m. - 9 p.m. Eastern
Time.
Again, while AWHG is unaware of any actual or attempted misuse of protected health information
as a result of this incident, AWGH nevertheless encourages individuals to review credit reports,
health account statements, health insurance account records and explanations of benefit forms for
suspicious activity and report all suspicious activity to the institute that issued the record
immediately.
