btyDENTAL Notifies Patients of Data Security Incident
Although at this time there is no evidence that patient information was actually accessed or viewed, or any indication of anyone’s information being misused or disclosed, btyDENTAL had reported a data security incident that may have resulted in the inadvertent exposure of some of our patients’ health information to U.S Department of Health & Human Service. The practice has taken steps to notify anyone who may have been affected by this incident, including sending letters to anyone whose information may have been exposed.
On November 17, 2019, we discovered that some of our servers had been impacted by ransomware. Our IT team immediately intervened to restore the impacted servers, and we engaged third party IT consultant company who specialize in Healthcare to investigate if any information may have been impacted. After examining the impacted server, the investigation was unable to determine if patients’ name and X-ray images had been viewed or accessed by an unknown, unauthorized third party. While our investigation did not identify specific activity surrounding patients’ information, we are notifying potentially impacted individuals out of an abundance of caution. Importantly, our practice management software and database were encrypted as required by HIPAA, and No Financial Information, Medical Record, Social Security Numbers, Date of Birth, if provided to us, were impacted by this event.
While there is no indication that an unauthorized party accessed or viewed patient information or evidence of patient information being misused, btyDENTAL remains committed to protecting patients’ information and has taken steps to prevent a similar event from occurring in the future, including reviewing and revising its information security policies and procedures. Letters have sent to each affected patients to notify of this incident. If you have a question regarding this please call Robert Croft Monday through Friday between 8:00 AM to 5:00 PM AK Time at 907-290-7744.
The privacy and security of our patient information is a top priority for btyDENTAL, we continually evaluate the security of our patient health information (PHI), and we strive to improve and strengthen the IT Security through training of our employees and most up-to-date security measures. We deeply regret any inconvenience or concern this incident may cause.