|
March 21, 2024 |
|
|
FOR IMMEDIATE RELEASE
M&D Capital Premier Billing LLC Discovered Data Security Incident
On or around July 8, 2023, M&D Capital Premier Billing LLC and the related companies ASC Strategic Services LLC and Drachman Katz LLP (collectively, “M&D”) identified suspicious activity within its computer environment. M&D immediately took steps to secure its network and launched an investigation with the assistance of third-party forensic specialists to determine the nature and scope of the activity. Through the investigation, M&D determined that an unauthorized threat actor may have obtained access to certain systems beginning on or around June 20, 2023. As a result, certain files within M&D’s systems may have been accessed or acquired by the unauthorized threat actor. M&D began notifying its covered entity clients on January 10, 2024. However, because of the nature of the incident, M&D did not have a clear understanding of exactly who may have been impacted by this incident until February 23, 2024.
M&D determined that all demographic personal information and healthcare information provided to the respective M&D entities may have been subject to unauthorized access during this incident. The impacted systems contained demographic and healthcare information provided by its covered entity clients, which may include a patient’s name, address, medical billing and insurance information, certain medical information such as diagnoses, medication and treatments, and demographic information such as date of birth, Social Security number, and financial information.
The confidentiality, privacy, and security of information in our care is one of our highest priorities. Upon learning of this incident, M&D promptly took steps to ensure the threat actor was removed from its computer system and further secure its computer environment. M&D also notified federal law enforcement about this incident.
In response to the incident, M&D is providing affected individuals with mailed notice of this incident and access to single bureau credit monitoring services at no charge. These services provide alerts when changes occur to an individual’s credit file. Finally, M&D is providing affected individuals with proactive fraud assistance to help with any questions or in event that affected individuals become a victim of fraud.
The events that have occurred do not automatically mean that any individual is a victim of identity theft. However, we encourage affected individuals to remain vigilant and to continually review healthcare insurance information. Additionally, affected individuals should continually review credit reports, bank account activity, and bank statements for irregularities or unauthorized items, and to immediately report any unauthorized charges to financial institutions. We also encourage enrollment in the free identity protection services.
Affected individuals will find additional information in the mailed notification letters. Additionally, affected individuals may call the help line at 1-844-794-1844 with questions regarding this incident or additional steps to take to better protect information.