Clinica de Salud del Valle de Salinas, Inc. (“CSVS”) is writing to notify you of a recent data security incident that involved your personal information. This letter constitutes substitute notice to individuals impacted by the incident. This letter informs you of this incident, the steps you can take to help protect your personal information and offers you complimentary credit monitoring and identity protection services.
Who is CSVS? CSVS is a Community Health Center (CHC) and a Federally Qualified Health Center (FQHC) dedicated to providing access to quality comprehensive health care to men, women, and children with an emphasis on farm worker families and the agricultural community. We have multiple locations throughout Monterey County.
What Happened? On or around March 11, 2024, CSVS discovered that it had fallen victim to a cybersecurity attack. CSVS promptly engaged a team of cybersecurity experts to assist it with conducting a forensic investigation to determine whether any data or personal information was compromised by the incident. On or around May 1, 2024, the investigation determined that certain data was accessed or acquired without authorization as a result of this incident. This incident has caused no disruption to the care and services CSVS provides to patients and the community.
What Information Was Involved? The impacted information may have included your name, demographic information, and clinical information (such as diagnoses, conditions, lab results, medications). Our Electronic Health Record (EHR) System was not accessed.
What Are We Doing? As soon as CSVS discovered the incident, it took the steps described above and notified federal law enforcement. CSVS also implemented additional security measures to minimize the risk of a similar incident occurring in the future. CSVS is further notifying you of this event and advising you about steps you can take to help protect your personal information.
CSVS is offering you access to identity protection services through IDX, a data breach and recovery services expert, at no charge. These services include: twelve (12) months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services. With this protection, IDX will help you resolve issues if your identity is compromised.
What Can You Do? CSVS recommends that you review the guidance included with this letter about how to protect your personal information. In addition, CSVS recommends enrolling in the complimentary services being offered by IDX to further protect your personal information. To receive credit monitoring services, you must be over the age of eighteen (18) and have established credit in the U.S., have a Social Security number to your name, and have a U.S. residential address associated with your credit file.
To enroll in identity protection services at no charge, please call 1-888-834-8505.
In order for you to receive the identity protection services described above, the enrollment deadline is September 3, 2024. The enrollment requires an internet connection and e-mail account and may not be available to minors under the age of 18 years of age. Please note that when signing up for identity protection services, you may be asked to verify personal information for your own protection to confirm your identity.
For More Information. If you have any questions regarding the incident or would like assistance with enrolling in the services offered, please call 1-888-834-8505 between 6:00 A.M. PDT to 6:00 P.M. PDT, Monday through Friday, excluding holidays.
CSVS appreciates your understanding and deeply regrets any worry or inconvenience that this may cause you.
