Assurance Health System

Notice of Data Security Incident

Notice of Data Security Incident

Assurance Health System, LLC (“Assurance”) is committed to protecting the security and privacy of the information we maintain for patients of the Assurance Health and Anew Health facilities, and patients of Clarksville Psych Hospital, LLC d/b/a Brightwell Behavioral Health(“Brightwell”), which is managed by Assurance. On October 28, 2022, we began mailing notification letters to some patients whose information may have been involved in an incident related to two Assurance email accounts.  

We initially identified the incident after experiencing unusual activity on our email system, and we immediately took steps to secure our email system and launched an investigation with the assistance of a third-party forensic investigator. The investigation determined that one email account was accessed between April 8, 2022 and April 21, 2022, and the second email account was accessed between June 10, 2021 and March 8, 2022. The investigation also determined that certain emails and attachments could have been obtained from the accounts.

On September 1, 2022, we completed our review of the emails and attachments that may have been involved in the incident. The analysis determined they contained the following information for some patients of Assurance Health, Anew Health and Brightwell: names, contact information, Social Security numbers, driver’s license numbers, dates of birth, Medical Record Numbers, Patient Account Numbers, dates of treatment, facilities of treatment, medical history, condition and diagnosis information, provider names, prescription information and/or health insurance information.

For individuals whose information may have been involved, we recommend that they review the statements they receive from their healthcare providers and contact the relevant provider immediately if they see services they did not receive. Additionally, for individuals whose Social Security numbers or driver’s license numbers may have been involved in the incident, we are offering complimentary credit monitoring and identity protection services through Experian.  

We take this incident very seriously and sincerely regret any concern this may cause. To help prevent something like this from happening again, we have implemented additional safeguards and technical security measures to further protect and monitor our email system.  A dedicated call center has been established to answer questions about this incident, which can be reached at 888-572-8995, Monday through Friday, between 9 am and 9 pm Eastern Time.