Kentucky Counseling Center (KCC) recently investigated a reported privacy incident and provided notification to affected patients. On January 4, 2019, a former staff member reported receiving an email containing a link to a list of Kentucky Counseling Center KCC patients. Based on KCC’s investigation to date, we believe a staff member took the list without authorization from our computer system on December 6, 2018. We believe that same individual used an anonymous Internet file sharing service to email the list to the former KCC staff member who then reported it to KCC. The individual we believe to be responsible for the email is no longer working with KCC.
While we do not believe the individual took the list to cause harm to individuals on the list, we wanted to make patients aware of these circumstances out of an abundance of caution. The type of information on the list varied for different people, but may have included the following: name; address; date of birth; email; phone number; sex; Social Security Number; marital and employment status; insurance payer and insurance number. The list did not include any clinical information other than the date of the last and/or next appointment for some individuals; and, in some cases, the names of KCC clinicians involved in an individual’s care. KCC has taken steps to prevent this type of event from happening in the future, including strengthening password requirements and implementing multi-factor authentication for computer system access.
KCC is providing credit monitoring at no cost to patients for one year. KCC mailed letters to affected individuals with information on enrolling in these monitoring services. KCC recommends patients remain vigilant to the possibility of fraud and identity theft by reviewing account statements and monitoring free credit reports for unauthorized activity. Patients may also contact the three nationwide credit reporting agencies using the contact information below to receive a free credit report:
|Equifax||P.O. Box 740241||Atlanta, GA 30374
|Experian||P.O. Box 2002 Allen, TX 75013 www.experian.com 1-888-397-3742||TransUnion||P.O. Box 1000||Chester, PA 19016
Individuals who suspect identity theft has occurred should contact local law enforcement authorities to file a police report. Individuals can also contact the Federal Trade Commission www.ftc.gov/idtheft or state Attorney General. The Federal Trade Commission provides information on steps an individual can take to avoid identity theft. Individuals can also obtain additional information from the credit reporting agencies above or the Federal Trade Commission about placing a fraud alert or security freeze on their credit reports.
KCC has established a toll-free number for patients who have questions that will be available Monday through Friday from 9:00 AM to 9:00 PM Eastern Time. The toll-free number to call is 877-431-9928.