Information Regarding Isolated Data Security Incident
Elara Caring recently learned of an isolated data security incident which may have impacted some personal information in our organization. We want to take a moment to share what happened, what this means for you, and how you can protect your information:
In mid-December 2020, Elara Caring learned of unauthorized access to a limited number our organization’s corporate email accounts. Upon discovery, Elara Caring promptly mitigated the threat, launched an in-depth investigation led by third-party security experts, notified law enforcement, and took necessary steps to secure our systems, including a password reset for all employees.
Based on evidence to date, we believe that certain patient and employee information may have been potentially viewed as a result of this isolated incident. That information may have included name, address, Social Security number, driver’s license number, Employer ID number, financial or bank account information, date of birth, email address and password, insurance information and insurance account number, and passport number. Importantly, we have no evidence at this time that personal information of Elara Caring patients or employees was downloaded, accessed or misused by the intruder.
Additionally, we have no evidence that malware was deployed or that our networks were otherwise impacted.
Please know that this isolated incident has not affected our ability to provide high-quality, comprehensive care, and there is not an active threat to our network or our ability to operate.
What is Elara Caring doing?
Elara Caring notified all potentially impacted individuals in accordance with state and federal regulations. In addition, out of an abundance of caution, we are providing impacted individuals with complimentary credit monitoring and identity protection services. Those who received notification letters can learn more about how to enroll in identity monitoring services by contacting our call center dedicated to handling inquiries related to this incident. The call center number is (833) 704-9390. The hours of operation are Monday through Friday from 8 a.m. – 10 p.m. Central, or Saturday and Sunday from 10 a.m. – 7 p.m. Central (excluding major U.S. holidays).
Elara Caring takes the protection of our patients’ and employees’ personal and medical information very seriously, and we are committed to safeguarding against future threats through increased cybersecurity training for employees and other technical measures to reinforce our defenses.
What does this mean for me?
If you did not receive a mailed letter informing you of this isolated incident, you are not an impacted individual.
However, we encourage all patients, employees, and other community members to take steps to protect themselves in a digital environment, including:
- Never open links or attachments sent from untrusted or unknown sources.
- Monitor your personal accounts frequently, and promptly report any suspicious activity to your bank or credit provider.
- Change your passwords frequently and never share them with untrusted sources.
We apologize for any inconvenience or concern that this has caused, but please know Elara Caring is committed to maintaining the confidentiality and integrity of your personal information. For any questions regarding this isolated incident, we encourage you to contact our dedicated call center. The call center number is (833) 704-9390. The hours of operation are Monday through Friday from 8 a.m. – 10 p.m. Central, or Saturday and Sunday from 10 a.m. – 7 p.m. Central (excluding major U.S. holidays).