NorthBay Healthcare Corporation ("we" or the "NorthBay") is committed to the privacy of individuals and takes the protection of personal information entrusted to it seriously.
On February 23, 2024, NorthBay Health identified limited suspicious activity in its network. Upon discovering the incident, we rapidly initiated an internal investigation and cooperated with law enforcement. We also engaged a leading forensic security firm to assist in the investigation and confirm the security of our computer systems and network. The forensic investigation recently concluded that the unauthorized third party had access to our network between January 11, 2024 and April 1, 2024. On March 25, 2024, we determined that the unauthorized third party gained access to certain files on our computer systems. Based on the investigation, we conducted a review of the contents of the involved files to determine if they contained any personal information. That review determined that the type of information involved included individuals' names, email address, address, phone number, health information and medical record numbers. In some instances, the information may have also included individuals' Social Security numbers, driver's license number, passport information or other financial information.
To date, NorthBay has no indication of any identity theft or fraud occurring as a result of this incident. Nonetheless, we are beginning to send notification letters to individuals identified as being involved in this incident and for whom we were able to locate a valid mailing address. Individuals who are identified as having Social Security numbers or driver's license numbers involved will also receive an offer for complimentary credit monitoring services. As a precautionary measure and as a general matter, we recommend that individuals remain vigilant to protect against potential fraud and/or identity theft by, among other things, reviewing their account statements, monitoring their credit reports closely, and notifying their financial institutions if unusual activity is detected. Individuals should also promptly report any fraudulent activity or suspected identity theft to proper law enforcement authorities, including the police and their state's attorney general. Individuals may also wish to review the tips provided by the Federal Trade Commission ("FTC") on fraud alerts, security/credit freezes and steps that they can take to avoid identity theft. For more information and to contact the FTC, please visit www.ftc.gov/idtheft or call 1-877-ID-THEFT (1-877-438-4338).
NorthBay takes our responsibility to safeguard personal information seriously. For further information and assistance, please call the dedicated call center that the NorthBay has engaged to address questions. The call center can be reached at 888-841-3370 from 6:00 a.m. to 6:00 p.m. PST, Monday - Friday excluding major US holidays.