On or about July 20, 2024, Ingham County Medical Care Facility, d/b/a, Dobie Road, (Dobie Road) learned of a data security incident involving its third-party electronic health records portal manager. No additional details were provided by the third party at that time. On or around September 19th, 2024, Dobie Road received updated information from the third party stating that the personal information of current and/or past patients/residents of Dobie Road may have been impacted. Dobie Road promptly launched an investigation and engaged experts to assist in assessing the scope of the incident and upon identification of the possible impacted data set, efforts were then initiated to provide notice to the potentially impacted population.
The elements of personal information that may have been impacted as a result of this incident varies per individual and potentially included: names, addresses, and in some instances, social security numbers. As of this writing, Dobie Road has not received any reports from individuals of misuse, identity theft or fraud related to the incident.
Unfortunately, these types of incidents are becoming increasingly common and organizations with the most sophisticated IT infrastructure available continue to be affected. Dobie Road understands the frustration or concern this incident may cause and will ensure the security of all information in its control and has taken steps to strengthen its security posture.
Dobie Road mailed formal notification letters to potentially affected individuals. The letters included additional information about what occurred, outlined the personal information that was potentially impacted for each individual, and provided a toll-free number that individuals can call to learn more about the incident.