Notice of Data Privacy Incident
UW Medicine recently learned of an information security incident by Kaye-Smith, a mailing service vendor that sends billing statements and letters on behalf of UW Medicine. Upon discovery of the incident, Kaye-Smith conducted an investigation with the assistance of outside experts and determined that a discrete number of their client files were compromised as part of a ransomware attack between late May and early June 2022.
On August 24, 2022, Kaye-Smith notified UW Medicine they had completed their analysis of the files involving UW Medicine data. Their analysis determined that files containing data elements used to send UW Medicine Patient Account & Support Services statements and letters related to billing services during the time of the compromise were included in the ransomware attack. The files contained guarantor names (the individual responsible for paying for the service), guarantor addresses, guarantor account numbers, guarantor IDs, patient names, medical record numbers, clinical services areas, treatment provider names, and abbreviated descriptions of clinical services billed. The files did *not* contain dates of birth, Social Security numbers, or financial information such as credit card numbers.
In response to the incident, Kaye-Smith reviewed the security of their environment to ensure that their systems are not currently at risk and they have also enhanced their security measures and monitoring to prevent further information security incidents. Kaye-Smith is also in the process of mailing notification letters to approximately 3,800 individuals affected by this incident at UW Medicine and is offering free credit monitoring and instructions about what steps can be taken to reduce the risk of identity theft.
We sincerely regret that this incident occurred and apologize for any distress this may cause our patients and their families. UW Medicine is committed to providing quality care while protecting patients’ personal information and has reported this incident to the U.S. Department of Health and Human Services Office for Civil Rights. UW Medicine patients who have questions about this incident may contact (877) 560-8603 between 6:00am and 6:00pm PST.