Notice of Data Incident
We are providing notice of a data incident involving Quantum Imaging & Therapeutic Associates, Inc. (“QITA”) that may have resulted in the unauthorized access to certain individual’s personal information. We take the privacy and protection of our patient’s information very seriously. This notice contains information about what happened, steps we have taken, and the resources available to those potentially affected.
What happened:
On October 7, 2021, QITA detected and stopped a network data security incident. Upon detection, we immediately started looking into the incident to determine what happened and how it happened. We also started looking into what type of information might have been affected.
Although we have found no evidence that any information has been specifically accessed for misuse, it is possible that the potentially impacted individuals’ name, mailing address, date of birth, Social Security Number, and/or protected health information (i.e. radiology procedure code or radiology procedure code description) may have been exposed as a result of the incident.
When we detected this incident, we responded immediately to secure our network environment and launched a thorough investigation with the help of independent information technology (“IT”) security and forensic specialists. The investigation helped determine the scope and extent of the potential unauthorized access to our systems and any sensitive information. We also notified law enforcement.
To date, there have not been any reports of related identity theft or misuse of any patient information. However, out of an abundance of caution, QITA mailed notification letters to affected individuals on May 9th, 2022. The letters included additional information about what occurred, and outlined the specific personal information that could have been exposed for that individual.
What we are doing and what you can do:
We take the security of all information in our control very seriously, and are continuously improving the security of our network environment by monitoring the evolving cyber security landscape and taking appropriate actions.
Although we are unaware of any misuse of anyone’s personal information, to help relieve concerns and restore confidence following this incident, we have secured the services of IDX to provide identity monitoring, at no cost, to affected individuals.
For more information:
Please know that the protection and security of your personal information is of our outmost priority. If you have any questions, please call IDX at (833) 909-4434 Monday through Friday, 6 am – 6 pm PST.