PVHS-ICM Data Security Notice

PVHS-ICM Employee Health and Wellness Provides Notice of Data Security Incident

FORT COLLINS, CO (June 30, 2017) –  PVHS-ICM Employee Health and Wellness, LLC (“PVHS-ICM”) recently discovered a data security incident that may have affected patient data of the UCHealth Walk-In Clinic, at the location formerly utilized by Miramont Urgent Care, 2211 S. College Ave., Fort Collins, CO 80525 (the “Clinic”). The incident was limited to this single physical location, and did not impact any other clinic. PVHS-ICM takes protecting the data in its control seriously and is providing information about the incident, what steps were taken in response, and what potentially affected individuals can do to help protect their information.

On May 4, 2017, PVHS-ICM learned that a Clinic computer server containing records of patients who visited the Clinic prior to September 23, 2014 may have been impacted by ransomware. PVHS-ICM immediately began an internal investigation and hired independent computer forensic experts to assist.  While there is no evidence that any patient information was accessed or removed from the computer server, we are notifying patients out of an abundance of caution.  The computer server may have included patient name, address, medical record (diagnosis and treatment information), other demographic information, and in some instances Social Security number. The server did not contain any financial account information.

PVHS-ICM has sent affected patients letters with information about the incident and resources made available to assist them with protecting their information. Affected patients will also be able to enroll in identity monitoring and identity theft remediation services free of charge through ID Experts.

The privacy and protection of patient information is a top priority for PVHS-ICM, which deeply regrets any inconvenience or concern this incident may cause.  PVHS-ICM is taking steps to prevent this kind of event from happening in the future, including taking the server offline, creating an encrypted backup of the information on the server, and storing the backup in a secure location.

PVHS-ICM has established a dedicated call center to answer any questions.  If you believe you have been affected and have additional questions, please call 1-866-562-9067. The call center is available Monday through Friday, between 6:00 a.m. and 6:00 p.m. Mountain Time (closed on U.S. observed holidays).