Assurance Health (“Assurance”) is committed to protecting the security and privacy of the information we maintain on behalf of our patients, and patients of Clarksville Psych Hospital, LLC d/b/a Brightwell Behavioral Health (“Brightwell”), which is managed by Assurance.
On December 9, 2022, we completed our response to, and investigation of, an incident related to two Assurance email accounts. We initially identified the incident after experiencing unusual activity on our email system, and we immediately took steps to secure our email system and launched an investigation with the assistance of a third-party forensic investigator. The investigation determined that one email account was accessed between April 8, 2022 and April 21, 2022, and the second email account was accessed between June 10, 2021 and March 8, 2022. The investigation also determined that certain emails and attachments could have been removed from the accounts.
Our analysis of those emails and attachments determined they may have contained the following information for some Assurance and Brightwell patients: names, contact information, Social Security numbers, driver’s license numbers, dates of birth, Medical Record Numbers, Patient Account Numbers, dates of treatment, facilities of treatment, medical history, condition and diagnosis information, provider names, prescription information and/or health insurance information.
For individuals whose information may have been involved, we recommend that they review the statements they receive from their healthcare providers and contact the relevant provider immediately if they see services they did not receive. Additionally, for individuals whose Social Security numbers or driver’s license numbers may have been involved in the incident, we are offering complimentary credit monitoring and identity protection services through Experian.
We take this incident very seriously and sincerely regret any concern this may cause. To help prevent something like this from happening again, we have implemented additional safeguards and technical security measures to further protect and monitor our email system. A dedicated call center has been established to answer questions about this incident, which can be reached at 888-572-8995, Monday through Friday, between 9 am and 9 pm Eastern Time.