Notice of Data Security Incident

June 5, 2023

Mount Desert Island Hospital (“MDIH”) is providing notification of a recent privacy incident. On May 4, 2023, we observed unusual activity on our computer network and immediately began an investigation. We also notified law enforcement. The investigation determined there was unauthorized access to certain areas of our network for a limited time between April 28, 2023 and May 7, 2023. Therefore, we are currently reviewing the types of information potentially impacted by this incident and to whom that information relates.

Although our review is ongoing, the types of information potentially impacted may include name, address, date of birth, driver’s license/state identification number, Social Security number, financial account information, medical record number, Medicare or Medicaid identification number, mental or physical treatment/condition information, diagnosis code/information, date of service, admission/discharge date, prescription information, billing/claims information, personal representative or guardian name, and health insurance information. Although we are unaware of any misuse of information resulting from this event, we are providing this notice in an abundance of caution.

In response to this incident, we worked with third-party specialists to re-secure our network, implement additional security precautions, and we are reviewing our policies and procedures related to data protection.

To obtain more information about this incident or enroll in complimentary credit monitoring services, individuals can contact our dedicated assistance line at 1-888-220-4877, Monday through Friday, 9 am to 9 pm Eastern, excluding major U.S. holidays. As a best practice, individuals are encouraged to remain vigilant against incidents of identity theft by reviewing account statements and explanation of benefits forms for suspicious activity and to detect errors. Individuals may also place a fraud alert or credit freeze by contacting the credit reporting agencies: TransUnion 1-800-680-7289, P.O. Box 2000 Chester, PA 19016, transunion.com; Experian 1-888-397-3742, P.O. Box 9554 Allen, TX 75013, experian.com; Equifax 1-888-298-0045, P.O. Box 105069 Atlanta, GA 30348, equifax.com. Individuals can further educate themselves regarding identity theft, fraud alerts, credit freezes, and steps to protect their personal information by contacting the credit reporting bureaus, the Federal Trade Commission (“FTC”), or their state Attorney General. The FTC may be reached at 600 Pennsylvania Ave. NW, Washington, D.C. 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. Instances of known or suspected identity theft should also be reported to law enforcement, the state Attorney General, and the FTC. Español – Si necesita más información traducida al Español, por favor llámenos al 1-833-753-4764.

July 6, 2023

Please note MDIH began mailing notices of this incident to potentially impacted individuals on June 30, 2023. If you have a question about the notice you received, or would like to enroll in complimentary credit monitoring and identity protection services, please call our dedicated assistance line at 1-888-220-4877, Monday through Friday from 9 a.m. to 9 p.m. Eastern, excluding major U.S. holidays.

As mailed notices are delivered, MDIH is receiving a high volume of calls from individuals with questions. We ask that you check the FAQs below to see if you question can be answered prior to calling.