Pacific Cataract and Laser Institute (PCLI) is committed to protecting the privacy and security of patient information. This notice concerns a recent data security event that involved some of that information.
On November 13, 2023, PCLI identified suspicious activity within our network. We immediately took steps to secure our network and launch an investigation to determine the nature and scope of the incident. The investigation determined that, between November 13, 2023 and 14, 2023, an unauthorized actor had access to certain systems containing files with personal and protected health information. Our electronic medical record system was not involved or accessed, and all PCLI facilities have remained open and actively serving patients throughout this incident.
PCLI notified federal law enforcement and is cooperating with its investigation. The U.S. Department of Health Human Services Office for Civil Rights and other relevant authorities were also alerted.
With the assistance of a third-party forensic security firm, PCLI conducted a detailed review of the files to confirm what information was stored therein and to whom the information related. This review is ongoing. Although PCLI has no evidence of any identity theft or fraud in connection with this incident, we are notifying individuals by mail whose information was potentially impacted.
The types of information related to potentially impacted patients may include medical treatment information, health insurance and claims information, financial account information, driver’s license information, and demographic information such as name, date of birth, and Social Security number.
PCLI encourages potentially impacted patients to remain vigilant against incidents of identity theft and fraud, to review account statements, and to monitor their credit reports and explanation of benefits forms for suspicious activity. We are also providing potentially impacted patients with contact information for the three major credit reporting agencies, as well as advice on obtaining free credit reports and placing fraud alerts and security freezes on their credit files. The relevant contact information is below:
Potentially impacted patients may also find information regarding identity theft, fraud alerts, security freezes, and the steps they may take to protect their information by contacting the credit bureaus, the Federal Trade Commission (FTC), or their state Attorney General. To contact the FTC, visit www.identitytheft.gov or call 1-877-ID-THEFT (1-877-438-4338) and TTY: 1-866-653-4261. Their mailing address is Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580.
Instances of known or suspected identity theft should also be reported to law enforcement or the individual’s state Attorney General.