Regional Family Medicine Hit by Cyberattack: Key Details Revealed

What You Need to Know

Regional Family Medicine reported a data breach affecting 80,166 individuals, involving unauthorized access to sensitive information including Social Security numbers, medical data, and biometric data between June 8 and 26, 2023.

Did You Receive A Regional Family Medicine Notice Letter?

Regional Family Medicine
Did you receive notice from Regional Family Medicine that your information was breached?
Do you still have a copy of the notice letter?
  • Company Name: Regional Family Medicine
  • Date Filed: December 12, 2023
  • Number of People Affected: 80,166
  • Data Breached: Names, Social Security numbers, driver’s license or state identification numbers, dates of birth, biometric data, medical information, health insurance information, account numbers, workplace evaluations

Who’s Affected & What Data Was Breached

Affected Customers

Regional Family Medicine has begun sending notification letters to the 80,166 individuals whose sensitive information was compromised in the recent data security incident.

Breached Data

The data accessed by the unauthorized party includes names, Social Security numbers, driver’s license or state ID numbers, dates of birth, biometric data, medical information, health insurance information, account numbers, and workplace evaluations. The combination of these data types presents a significant risk of identity theft and fraud for the affected individuals.

Overview of the Regional Family Medicine Data Breach

Initial Discovery and Response

On June 26, 2023, Regional Family Medicine confronted what appeared to be an IT systems outage. The healthcare provider, based in Mountain Home, Arkansas, promptly initiated an investigation with the help of data security specialists.

Breach Confirmation and Extent

The inquiry revealed a cyberattack allowing unauthorized access to their network between June 8, 2023, and June 26, 2023. It was during this period that the threat actor(s) accessed files containing potentially sensitive patient data.

Sensitive Information Exposed

The breach compromised patients’ personal and medical information. The array of potentially exposed data includes names, Social Security numbers, driver s license or state ID numbers, dates of birth, biometric data, medical details, health insurance particulars, account numbers, and workplace evaluations.

Notification of the Breach

Upon confirming that the information was indeed vulnerable to an unauthorized entity, Regional Family Medicine reviewed the affected files to ascertain which consumers had their data compromised. Each individual s exposed information varied.

Data Breach Notification Letters

Following the investigation’s conclusion, Regional Family Medicine issued letters on December 12, 2023, to the 80,166 individuals whose information was impacted. These letters aimed to inform the affected parties about the nature of the compromised data.

Regulatory Compliance

In alignment with legal protocols, Regional Family Medicine disclosed the breach to the Attorney General of Maine. The notice elucidated the sequence of events and implicated the types of consumer data accessed during the attack.

Additional Information on Regional Family Medicine

Formerly known as Kerr Medical Center, Regional Family Medicine operates two clinics offering primary care and other medical services, including radiology and minor surgeries. With over 70 employees, the company generates an estimated annual revenue of $8 million.

More Information About Regional Family Medicine

Overview of the Company

Regional Family Medicine, once known as Kerr Medical Center, is a healthcare practice that specializes in primary care and is situated in Mountain Home, Arkansas. The organization operates primarily within this region, catering to the local community s healthcare needs.

Services Provided

The practice offers a broad spectrum of primary care services. These services include routine health check-ups, preventive care, and the management of chronic conditions. Regional Family Medicine’s role in the community is integral as it serves as the first point of contact for patients seeking healthcare.

Customer Base

The customer base of Regional Family Medicine comprises individuals and families within the Mountain Home area and the surrounding regions. Patients of all ages rely on Regional Family for their general healthcare needs, making the practice a crucial element of the community’s health infrastructure.

Specialized Care

In addition to primary care services, Regional Family also provides more specialized services such as radiology. They are equipped to handle various diagnostic procedures which support the overall diagnostic process for patients.

Surgical Procedures

The clinic s capabilities extend to performing minor surgeries on-site. This allows patients to receive comprehensive care, including certain surgical procedures, without the need to visit larger, more distant hospitals.

Employment and Economic Contribution

Employing more than 70 individuals, Regional Family Medicine is not only a healthcare provider but also a significant contributor to the local economy. The practice generates roughly $8 million in annual revenue, highlighting its scale and the impact on its community.

Facility Locations

With two clinics located in Mountain Home, Arkansas, patients have access to care at multiple points within the city. This setup aims to provide convenience and reduce travel time for patients seeking medical attention.

Emphasis on Accessibility

By offering a range of primary care services and maintaining a presence in Mountain Home with multiple clinics, Regional Family Medicine promotes accessibility to quality healthcare. Accessibility is a cornerstone of their service, ensuring that patients receive the care they need when they need it.

Commitment to Patient Data

Regional Family Medicine recognizes the importance of safeguarding patient data, as evident by their response to the data breach. The organization has taken steps to investigate the incident and notified affected individuals, showcasing their commitment to patient privacy and trust.