CompuNet Clinical Laboratories Provides Notice of Security Incident
Daytona, Ohio - April 10, 2024 - CompuNet Clinical Laboratories ("CompuNet") is informing potentially impacted individuals that certain information related to them may have been impermissibly accessed.
On or around February 10, 2024, CompuNet became aware that the autofill function on certain registration devices in the reception area of a patient service center was not disabled. As a result, patients who typed their name into the device would be able to see the most recent patients whose names also started with the same letter. After becoming aware of the issue, we took steps to disable the function, pull the devices from regular use, and launched an investigation to determine the nature and scope of the potential unauthorized access. CompuNet's investigation determined that between January 3, 2024, and March 7, 2024, the autofill function was improperly enabled. As a result, CompuNet began an extensive review of the records to determine whether sensitive information may be impacted. CompuNet's review determined that information related to certain individuals was present on the relevant devices. Following this determination, we undertook an in-depth review process to identify the individuals and CompuNet clients who were potentially impacted. Specifically, the review determined that the information potentially involved included names, dates of birth, and phone numbers. There is no evidence to suggest that lab orders and/or results were impacted.
CompuNet mailed notice to those individuals whose information may have been impacted. Additionally, CompuNet took steps to prevent this issue from continuing further.
CompuNet is unaware of any misuse of this information. However, out of an abundance of caution, CompuNet is providing guidance on how to protect against identity theft and fraud, should those potentially impacted feel it is necessary to do so. The notice encourages those individuals to remain vigilant against incidents of identity theft and fraud, to review account statements credit reports, and explanation of benefits forms for suspicious activity and report any suspicious activity immediately. The notice also provides additional information on obtaining a free credit report annually from each of the three major credit reporting bureaus by visiting www.annualcreditreport.com, calling 877-322-8228, or contacting the three major credit bureaus directly at: Equifax, P.O. Box 105069, Atlanta, GA, 30348-5069, 1-888-298-0045, www.equifax.com; Experian, P.O. Box 9554, Allen, TX 75013, 1-888-397-3742, www.experian.com; TransUnion, P.O. Box 2000, Chester, PA 19016, 1-800-916-8800, www.transunion.com. Potentially impacted individuals may also find information regarding identity theft, fraud alerts, credit freezes and the steps they may take to protect their information by contacting the credit bureaus, the Federal Trade Commission or their state Attorney General. The Federal Trade Commission can be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. Instances of known or suspected identity theft should also be reported to law enforcement or the individual's state Attorney General.
Information security is among CompuNet's highest priorities, and we have strict security measures in place to protect information in our care. CompuNet deeply regrets any inconvenience or concern this situation may have caused you. If you believe you are potentially impacted by this incident or have additional questions, please contact our dedicated assistance line at 888-681-1070 Monday through Friday, 9:00 a.m. to 9:00 p.m., Eastern Time. You can also write to CompuNet at 110 North Main Street, Suite 900, Dayton, OH 45402.
Media Contact: Elizabeth D. Wilfong , 937-499.9707
/PRNewswire -- April 10, 2024/
SOURCE CompuNet Clinical Laboratories, LLC
