POST Online Media Lite Edition


Boys Town hit by data leak, no info on information misuse

Staff Writer |
Boys Town National Research Hospital provided notice to current and former patients and employees of a recent incident involving personal information.

Article continues below

To date, Boys Town has not received any reports that personal information has been misused as a result of this incident.

On May 23, 2018, Boys Town became aware of unusual activity relating to an employee email account. Boys Town quickly launched an investigation to determine what may have happened and what information may have been affected, working together with computer forensics experts.

The investigation determined that an unknown individual had access to the email account on May 23, 2018.

Boys Town reviewed the email account to identify what personal information was stored within the email account.

On or around July 3, 2018, Boys Town confirmed the personal information that may have been accessible as a result of the incident and the identities of the individuals relating to this personal information.

The investigation in this matter confirmed that the following types of personal information related to Boys Town patients and employees may have been accessible as a result of the incident: name, date of birth, Social Security number, diagnosis or treatment information, Medicare or Medicaid identification number, medical record number, billing/claims information, health insurance information, disability code, birth or marriage certificate information, Employer Identification Number, driver's license number, passport information, banking or financial account number, and username and password.

To date, Boys Town has not received any reports of the misuse of this information.

Boys Town takes this incident and the security of personal information seriously. Upon learning of this incident, Boys Town moved quickly to confirm whether personal information may have been affected by this incident, to identify the individuals related to this personal information, to put in place resources to assist them, and to provide them with notice of this incident.

Boys Town is reviewing its existing policies and procedures, and implementing additional safeguards to protect information stored in its systems. Boys Town reported this incident to law enforcement and is notifying state regulators, as required.

Boys Town is also notifying potentially affected individuals and will be offering these individuals access to 12 months of free identity protection services.

Boys Town encourages potentially impacted individuals to review their accounts, explanations of benefits, and credit reports for suspicious activity, and to report any suspicious activity to the affiliated institutions immediately.

Boys Town is providing potentially impacted individuals with contact information for the three major credit reporting agencies, as well as providing advice on how to obtain free credit reports and how to place fraud alerts and security freezes on their credit files.

What to read next

Bridgestone to acquire Pep Boys in $835 million deal
Bridgestone and The Pep Boys agreed on acquisition
Pep Boys to go with Bridgestone's increased offer of $15.50 per share