Notice of Data Security Incident
Dec. 17, 2021 – This is to notify affected individuals about a data security incident that involved a limited number of our clients’ personal information. Integrated Services of Kalamazoo, Inc. (“ISK”) takes the protection of your information very seriously. For this reason, we are contacting you directly to explain the circumstances of the incident and provide you with information on how you can take additional steps to protect your personal information.
In late spring, ISK became aware of unusual activity within an employee’s email account. ISK immediately conducted an internal investigation which included the involvement of forensics or legal investigators, which revealed that an unauthorized individual had access to a limited number of ISK email accounts and apparently used them to send SPAM emails. Such access potential to the email accounts was from March 29 to May 25, 2021.
WHAT INFORMATION WAS INVOLVED?
While we have no confirmation of what information may have been viewed or accessed, the following information may have been involved: individuals’ names, email and contact information, medical information, medical record numbers, treatment provider and location information, health insurance/Medicaid information, diagnosis, lab results, medications and other treatment information, driver’s license, bank and/or bank account information. Social Security numbers and dates of birth may have been involved as well.