By Boyd C. Allen

Pilot Staff Writer

A report issued by the Curry Health Network (CHN) March 26 said some community members might have been affected when an unauthorized third-party accessed the FastHealth web server.

CHN said FastHealth provides the hosting and programming for its website and stores the files saved from forms submitted on the CHN website on their servers.

The breach might have allowed criminals to acquire information from certain databases, including information submitted to CHN on their employment application form.

The report indicated information may or may not have been accessed and emphasized the the information did not include, “health information protected by HIPAA, medical records, patient portal data, online bill pay information, or any other forms on the website.”

According to information published on DataBreaches.net, a number of health care facilities were previously impacted by a breach at FastHealth in May 2017. In that breach, more than 9,200 patients who submitted payments between January 2014 and December 2016 were affected.

again detailed by DataBreaches.net, and referring to a notification letter from FastHealth, an unauthorized party gained access to their web server in mid-August 2017 and obtained patient data. FastHealth completed their investigation, conducted by an external firm, in January.

“FastHealth’s notification tells patients that they have no evidence of misuse of patients’ information, but the fact that law enforcement alerted them to the breach does not bode well in that regard,” DataBreaches said.

FastHealth is in the process of sending letters to those whose information might be accessed, according to CHN, and is offering one year’s identity monitoring to all persons who receive the letter. This service includes credit monitoring, fraud consultation, and identity theft restoration.

Attempts to reach FastHealth to clarify the extent of the breach and local impacts were sent to KROLL and messages were not answered.

An email from FastHalth indicated their management would not be able to respond until Monday due to the Easter holiday.

CHN officials were unavailable to respond.

Anyone who has received a letter, or receives a letter in the future, and has questions, comments or concerns, contact the call center number at 833-215-3730.

Reach Boyd C. Allen at ballen@currypilot.com .

19948635