Notice of Data Security Incident
For questions or concerns or to determine whether your information was impacted, please call 1-888-743-6538, Monday through Friday from 9 am – 9 pm Eastern Time. We regret any inconvenience or concern that this incident may cause.
Greater Rochester Independent Practice Association Inc. (“GRIPA”) recently learned about a data security incident that may have impacted a limited amount of protected health information (“PHI”) for patients. GRIPA provides care coordination services for various health care providers, and would have been provided patient PHI to perform these services.
What Happened?
On May 31, 2023, GRIPA learned of the global exploit of the file transfer tool called MOVEit. Immediately after being notified of the incident, we stopped access to MOVEit and had a forensic investigation conducted to determine what occurred and whether any data was compromised. The investigation was completed on June 5, 2023, at which point we determined that files were taken from the MOVEit server. We then worked with a vendor to review these files for any personal information. This process was completed on September 1, 2023, when we learned that protected health information was impacted. At this time, we have no indication that any personal information has been misused.
What We are Doing:
We stopped access to the MOVEit service, securely restored our servers from backups, and applied the patches provided by the MOVEit software provider, Progress. Letters are being mailed to any impacted individual for whom there is contact information with more information about the incident, and resources that will be made available to them. If an individual’s Social Security number was affected, credit monitoring and identity restoration services will be provided at no cost.
What You Can Do:
Individuals should remain vigilant for incidents of identity theft or fraud by reviewing bank accounts and other financial statements, as well as credit reports, for suspicious activity. Incidents of identity theft should be reported to law enforcement or the attorney general.
For questions or concerns or to determine whether your information was impacted, please call 1-888-743-6538, Monday through Friday from 9 am – 9 pm Eastern Time. We regret any inconvenience or concern that this incident may cause.