Security Incident – Arizona Liver Health
NOTICE OF DATA SECURITY INCIDENT
The Institute for Liver Health II, which does business as Arizona Clinical Trials and Arizona Liver Health (collectively, “ALH” or “Arizona Liver Health”)), is notifying individuals of a recent data security incident. Please read this notice carefully as it contains information regarding the incident and steps that you can take to help protect your personal information
What Happened?
On or about January 30, 2023, ALH was informed by law enforcement that ALH was named in a part of the internet used by criminals as an entity whose information may have been taken by a criminal. This notification prompted ALH to commence an investigation, which included retaining a specialized cybersecurity firm.
The investigation revealed that an unauthorized third party gained access to ALH systems for a limited period and obtained certain files that may have included personal information, including personal health information. ALH confirmed that the unauthorized third party no longer has access to its environment.
What Information Was Involved
The information involved varies by individual but may include date of birth, financial account number, and medical information, such as diagnosis/conditions; lab results; medications; treatment information. For a limited number of individuals, driver’s license number/government identification number may also be involved.
To find out if you were impacted by this incident, please call us at 1-800-405-6108 between the hours of 8:00 a.m. to 8:00 p.m. Eastern time, Monday through Friday, excluding holidays.
What Are We Doing?
The notification from law enforcement prompted us to commence an investigation, which included retaining a specialized cyber firm. We also took certain administrative and technical precautions to prevent this type of incident from happening again. ALH is also notifying relevant regulatory authorities, as required.
What You Can Do?
We encourage you to consider the following recommendations to protect your personal information:
Enroll in Complimentary Credit Monitoring. We have arranged for Cyberscout through Identity Force, a TransUnion brand, to provide individuals who have been impacted by this incident with one year of complimentary credit monitoring. These services provide access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services. The services provide alerts for twelve months from the date of enrollment when changes occur to the individual’s credit file. These alerts are sent to the individual the same day that the change or update takes place with the bureau.
To find out if you have been impacted by this incident, please call us at 1-800-405-6108. If we confirm that your information was involved, we will provide instructions on how to enroll in the complimentary credit monitoring services over the call. The deadline to enroll in the complimentary credit monitoring services is June 29, 2023.
The enrollment requires an internet connection and e-mail account and may not be available to minors under 18 years of age. Please note that when signing up for monitoring services, you may be asked to verify personal information for your own protection to confirm your identity.
Review Your Accounts for Suspicious Activity. We encourage you to remain vigilant by regularly reviewing your accounts and monitoring credit reports for suspicious activity.
Order a Credit Report. If you are a U.S. resident, you are entitled under U.S. law to one free credit report annually from each of the three nationwide consumer reporting agencies. To order your free credit report, visit www.annualcreditreport.com or call toll-free at 1-877-322-8228. If you discover information on your credit report arising from a fraudulent transaction, you should request that the credit reporting agency delete that information from your credit report file. Contact information for the nationwide credit reporting agencies is provided in the next section.
Contact the Federal Trade Commission, Law Enforcement and Credit Bureaus. You may contact the Federal Trade Commission (“FTC”), your state’s Attorney General’s office, or law enforcement, to report incidents of identity theft or to learn about steps you can take to protect yourself from identity theft. To learn more, you can go to the FTC’s websites at www.identitytheft.gov and www.ftc.gov/idtheft; call the FTC at (877) IDTHEFT (438-4338); or write to: FTC Consumer Response Center, 600 Pennsylvania Avenue, NW, Washington, DC 20580.
You may contact the nationwide credit reporting agencies at:
Equifax
(800) 525-6285
P.O. Box 740241
Atlanta, GA 30374-0241
www.equifax.com Experian
(888) 397-3742
P.O. Box 9701
Allen, TX 75013
www.experian.com TransUnion
(800) 916-8800
Fraud Victim Assistance Division
P.O. Box 2000
Chester, PA 19022
www.transunion.com
Additional Rights Under the FCRA. You have rights pursuant to the Fair Credit Reporting Act, such as the right to be told if information in your credit file has been used against you, the right to know what is in your credit file, the right to ask for your credit score, and the right to dispute incomplete or inaccurate information. Further, pursuant to the Fair Credit Reporting Act, the consumer reporting agencies must correct or delete inaccurate, incomplete, or unverifiable information; consumer reporting agencies may not report outdated negative information; access to your file is limited; you must give your consent for credit reports to be provided to employers; you may limit “prescreened” offers of credit and insurance you get based on information in your credit report; and you may seek damages from violators. You may have additional rights under the Fair Credit Reporting Act not summarized here.
Identity theft victims and active-duty military personnel have specific additional rights pursuant to the Fair Credit Reporting Act. We encourage you to review your rights pursuant to the Fair Credit Reporting Act by: (i) visiting https://files.consumerfinance.gov/f/documents/bcfp_consumer-rights-summary_2018-09.pdf; or (ii) by writing to Consumer Financial Protection Bureau, 1700 G Street, N.W., Washington, DC 20552.
Request Fraud Alerts and Security Freezes. You may obtain additional information from the FTC and the credit reporting agencies about fraud alerts and security freezes. You can add a fraud alert to your credit report file to help protect your credit information. A fraud alert can make it more difficult for someone to get credit in your name because it tells creditors to follow certain procedures to protect you, but it also may delay your ability to obtain credit. You may place a fraud alert in your file by calling just one of the three nationwide credit reporting agencies listed above. As soon as that agency processes your fraud alert, it will notify the other two agencies, which then must also place fraud alerts in your file.
In addition, you can contact the nationwide credit reporting agencies at the following numbers to place a security freeze at no cost to you:
Equifax (800) 349-9960 Experian (888) 397-3742 TransUnion (888) 909-8872
Placing a security freeze prohibits the agency from releasing any information about your credit report without your written authorization. Security freezes must be placed separately at each of the three nationwide credit reporting agencies. When requesting a security freeze, you may need to provide the following information:
Your full name, with middle initial as well as Jr., Sr., II, etc.
Social Security number
Date of birth
Current address and all addresses for the past two years
Proof of current address, such as a current utility bill or telephone bill
Legible copy of a government-issued identification card, such as a state driver’s license, state identification card, or military identification.
After receiving your request, each agency will send you a confirmation letter containing a unique PIN or password that you will need to lift or remove the freeze. You should keep the PIN or password in a safe place.
For Residents of Oregon: You may report suspected identity theft to law enforcement, including the Office of the Oregon Attorney General and the FTC. Contact information for the FTC is included in your notice. The Office of the Oregon Attorney General can be reached: (1) by mail at 1162 Court St. NE, Salem, OR 97301; (2) by phone at (877) 877-9392; or (3) online at https://www.doj.state.or.us/.
For More Information.
If you have any questions or need additional information, please call our dedicated call center at 1-800-405-6108, which is available from 8:00 a.m. to 8:00 p.m. Eastern Time Monday through Friday (excluding major U.S. holidays).
We regret any concern or inconvenience this matter may have caused you and appreciate your patience and understanding.
Sincerely,
Arizona Liver Health
The Institute for Liver Health II, which does business as Arizona Clinical Trials and Arizona Liver Health (collectively, “ALH” or “Arizona Liver Health”)), is notifying individuals of a recent data security incident. Please read this notice carefully as it contains information regarding the incident and steps that you can take to help protect your personal information
What Happened?
On or about January 30, 2023, ALH was informed by law enforcement that ALH was named in a part of the internet used by criminals as an entity whose information may have been taken by a criminal. This notification prompted ALH to commence an investigation, which included retaining a specialized cybersecurity firm.
The investigation revealed that an unauthorized third party gained access to ALH systems for a limited period and obtained certain files that may have included personal information, including personal health information. ALH confirmed that the unauthorized third party no longer has access to its environment.
What Information Was Involved
The information involved varies by individual but may include date of birth, financial account number, and medical information, such as diagnosis/conditions; lab results; medications; treatment information. For a limited number of individuals, driver’s license number/government identification number may also be involved.
To find out if you were impacted by this incident, please call us at 1-800-405-6108 between the hours of 8:00 a.m. to 8:00 p.m. Eastern time, Monday through Friday, excluding holidays.
What Are We Doing?
The notification from law enforcement prompted us to commence an investigation, which included retaining a specialized cyber firm. We also took certain administrative and technical precautions to prevent this type of incident from happening again. ALH is also notifying relevant regulatory authorities, as required.
What You Can Do?
We encourage you to consider the following recommendations to protect your personal information:
Enroll in Complimentary Credit Monitoring. We have arranged for Cyberscout through Identity Force, a TransUnion brand, to provide individuals who have been impacted by this incident with one year of complimentary credit monitoring. These services provide access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services. The services provide alerts for twelve months from the date of enrollment when changes occur to the individual’s credit file. These alerts are sent to the individual the same day that the change or update takes place with the bureau.
To find out if you have been impacted by this incident, please call us at 1-800-405-6108. If we confirm that your information was involved, we will provide instructions on how to enroll in the complimentary credit monitoring services over the call. The deadline to enroll in the complimentary credit monitoring services is June 29, 2023.
The enrollment requires an internet connection and e-mail account and may not be available to minors under 18 years of age. Please note that when signing up for monitoring services, you may be asked to verify personal information for your own protection to confirm your identity.
Review Your Accounts for Suspicious Activity. We encourage you to remain vigilant by regularly reviewing your accounts and monitoring credit reports for suspicious activity.
Order a Credit Report. If you are a U.S. resident, you are entitled under U.S. law to one free credit report annually from each of the three nationwide consumer reporting agencies. To order your free credit report, visit www.annualcreditreport.com or call toll-free at 1-877-322-8228. If you discover information on your credit report arising from a fraudulent transaction, you should request that the credit reporting agency delete that information from your credit report file. Contact information for the nationwide credit reporting agencies is provided in the next section.
Contact the Federal Trade Commission, Law Enforcement and Credit Bureaus. You may contact the Federal Trade Commission (“FTC”), your state’s Attorney General’s office, or law enforcement, to report incidents of identity theft or to learn about steps you can take to protect yourself from identity theft. To learn more, you can go to the FTC’s websites at www.identitytheft.gov and www.ftc.gov/idtheft; call the FTC at (877) IDTHEFT (438-4338); or write to: FTC Consumer Response Center, 600 Pennsylvania Avenue, NW, Washington, DC 20580.
You may contact the nationwide credit reporting agencies at:
Equifax
(800) 525-6285
P.O. Box 740241
Atlanta, GA 30374-0241
www.equifax.com Experian
(888) 397-3742
P.O. Box 9701
Allen, TX 75013
www.experian.com TransUnion
(800) 916-8800
Fraud Victim Assistance Division
P.O. Box 2000
Chester, PA 19022
www.transunion.com
Additional Rights Under the FCRA. You have rights pursuant to the Fair Credit Reporting Act, such as the right to be told if information in your credit file has been used against you, the right to know what is in your credit file, the right to ask for your credit score, and the right to dispute incomplete or inaccurate information. Further, pursuant to the Fair Credit Reporting Act, the consumer reporting agencies must correct or delete inaccurate, incomplete, or unverifiable information; consumer reporting agencies may not report outdated negative information; access to your file is limited; you must give your consent for credit reports to be provided to employers; you may limit “prescreened” offers of credit and insurance you get based on information in your credit report; and you may seek damages from violators. You may have additional rights under the Fair Credit Reporting Act not summarized here.
Identity theft victims and active-duty military personnel have specific additional rights pursuant to the Fair Credit Reporting Act. We encourage you to review your rights pursuant to the Fair Credit Reporting Act by: (i) visiting https://files.consumerfinance.gov/f/documents/bcfp_consumer-rights-summary_2018-09.pdf; or (ii) by writing to Consumer Financial Protection Bureau, 1700 G Street, N.W., Washington, DC 20552.
Request Fraud Alerts and Security Freezes. You may obtain additional information from the FTC and the credit reporting agencies about fraud alerts and security freezes. You can add a fraud alert to your credit report file to help protect your credit information. A fraud alert can make it more difficult for someone to get credit in your name because it tells creditors to follow certain procedures to protect you, but it also may delay your ability to obtain credit. You may place a fraud alert in your file by calling just one of the three nationwide credit reporting agencies listed above. As soon as that agency processes your fraud alert, it will notify the other two agencies, which then must also place fraud alerts in your file.
In addition, you can contact the nationwide credit reporting agencies at the following numbers to place a security freeze at no cost to you:
Equifax (800) 349-9960 Experian (888) 397-3742 TransUnion (888) 909-8872
Placing a security freeze prohibits the agency from releasing any information about your credit report without your written authorization. Security freezes must be placed separately at each of the three nationwide credit reporting agencies. When requesting a security freeze, you may need to provide the following information:
Your full name, with middle initial as well as Jr., Sr., II, etc.
Social Security number
Date of birth
Current address and all addresses for the past two years
Proof of current address, such as a current utility bill or telephone bill
Legible copy of a government-issued identification card, such as a state driver’s license, state identification card, or military identification.
After receiving your request, each agency will send you a confirmation letter containing a unique PIN or password that you will need to lift or remove the freeze. You should keep the PIN or password in a safe place.
For Residents of Oregon: You may report suspected identity theft to law enforcement, including the Office of the Oregon Attorney General and the FTC. Contact information for the FTC is included in your notice. The Office of the Oregon Attorney General can be reached: (1) by mail at 1162 Court St. NE, Salem, OR 97301; (2) by phone at (877) 877-9392; or (3) online at https://www.doj.state.or.us/.
For More Information.
If you have any questions or need additional information, please call our dedicated call center at 1-800-405-6108, which is available from 8:00 a.m. to 8:00 p.m. Eastern Time Monday through Friday (excluding major U.S. holidays).
We regret any concern or inconvenience this matter may have caused you and appreciate your patience and understanding.
Sincerely,
Arizona Liver Health
