Adventist Health has just reported that an unauthorized individual accessed the protected health information (PHI) of over 70,000 patients of Adventist Health Tulare in California. The security incident happened at its business associate, Signature Performance, which collects payments for Adventists Health.
Adventist Health stated that Signature Performance discovered suspicious activity inside its system and promptly started an investigation. With the help of third-party forensic specialists, the investigation determined that an unknown party accessed some patient data. But Adventist Health claims the exposed data was not involved in any improper use of data. It is uncertain how Adventist Health arrived at that information. Adventist Health claims to secure patients’ health data, including the personal data of associates, and its data systems.
Signature Performance is sending notification letters to all patients who might have been impacted. The exposed data varies for each patient, so the notification letters mention the types of data affected for each individual. Individuals who want more details about the breach can call the toll-free number 833-566-7793 from 5 a.m. to 5 p.m. PST, from Monday to Friday excluding holidays. Patients could also send their queries to Signature Performance at 10250 Regency Circle, Suite 500, Omaha, NE 68114. Patients trying to call Adventist Health Tulare regarding this occurrence will be instructed to call Signature Performance’s toll-free number to receive the quickest response.
No substitute breach notice is currently posted on the websites of the California Attorney General, Adventist Health, or Signature Performance. However, a substitute notice is posted on the Maine Attorney General’s website on February 9, 2024, and pertains to the unauthorized access from January 17 to January 18, 2024, that was detected on January 18. The notice says that the 7,122 people impacted received credit monitoring services. It is unclear if this incident is the same with more people now identified to have been impacted or if it is a different incident.
As of June 14, 2024, Adventist Health Tulare submitted the breach report to the HHS’ Office for Civil Rights with 70,802 patients impacted. Signature Performance enforced several security procedures to further limit the chances that the same incident will happen later. As a safety precaution, Signature Performance is offering affected individuals single bureau credit monitoring, credit score, and credit report services for free.