IRVING, Texas, Nov. 15, 2019 /PRNewswire/ — Choice Cancer Care Treatment Center (“Choice Cancer Care”) operates cancer treatment centers in Texas where it offers individualized cancer treatment plans for patients. Choice Cancer Care is providing notice of an incident that may have involved the privacy of certain patient information in its care. While, to date, the investigation found no evidence of actual or attempted misuse of patient information related to this incident, in an abundance of caution, Choice Cancer Care is notifying patients regarding the incident and providing information related to its response and steps individuals may take to protect their personal information, should they feel it appropriate to do so.
On May 21, 2019, Choice Cancer Care became aware of suspicious activity relating to a company email account. Choice Cancer Care commenced an investigation, which included working with a leading third-party forensic investigation firm, to determine the full nature and scope of the incident. The investigation confirmed that an unauthorized actor gained access to one (1) email account between May 1st and May 21st, 2019. Based on this determinization and working with these third-party experts, Choice Cancer Care undertook a diligent programmatic and manual review of the contents of the relevant email account to determine whether personal information may have been present in the email account at the time of the incident. Through this review, on September 18, 2019, Choice Cancer Care determined personal information was present in the relevant email account. Choice Cancer Care then worked to review the records identified within the relevant email account to determine to whom the information related and confirm contact information for those individuals. While the investigation found no evidence of actual or attempted misuse of information related to this incident, the review did determine that the information present in the affected email account may include patient name and medical or health insurance information. For a very small number of individuals, the data may also include driver’s license, Social Security number, credit card information, and passport number.
The privacy and security of information in its possession are among Choice Cancer Care’s highest priorities and, accordingly, Choice Cancer Care has security measures in place to protect information in its system. Upon learning of this incident, Choice Cancer Care quickly took steps to confirm the security of its employee email accounts and commenced thorough and diligent investigation into the nature and scope of the email activity. Further, Choice Cancer Care is reviewing its policies and procedures relating to data security and conducting additional employee training on data privacy and security.
In an abundance of caution, Choice Cancer Care is notifying potentially affected individuals so that they may take further steps to protect their personal information, should they feel it is appropriate to do so. Choice Cancer Care is also providing access to credit monitoring and identity restoration services through ID Experts at no cost to potentially impacted patients. Choice Cancer encourages potentially affected patients enroll in these services and to review the notice letter they received, which contains information on what they can do to protect their personal information, should they feel it is appropriate to do so. This information is also included below and is available on Choice Cancer Care’s website at https://choicecancercare.com/.
Choice Cancer Care sincerely regrets any inconvenience or concern this incident may have caused. Individual with questions may call Choice Cancer Care’s dedicated assistance line at 833-953-1740 (toll free), Monday through Friday, 8:00 a.m. to 8:00 p.m., CT. Individuals may also write to Choice Cancer Center at 7415 Las Colinas Blvd. Suite 100, Irving, Texas 75063
You can read the full press release/notice here.