SW Family Medicine Data Breach Affects 36,959 People

On August 7, 2024, South West Family Medicine Associates, PA (SW Family Medicine) experienced a significant data breach that compromised the personal information of 36,959 individuals across the United States, including three residents of Maine.

The breach was discovered on October 24, 2024, after an extensive forensic investigation revealed unauthorized access to sensitive data.

The exposed information is extensive and includes Social Security numbers, driver's license numbers, dates of birth, addresses, medication information, medical histories, lab results, diagnosis/condition information, passwords, personal identification numbers, access codes, passport numbers, mother's maiden names, unique private keys used for electronic authentication, tax identification numbers, identity protection personal identification numbers, health insurance policy numbers, and subscriber information.

The breach was publicly disclosed on November 7, 2024, and reported to the Maine Attorney General's office.

South West Family Medicine's Response

Upon learning of the breach, SW Family Medicine initiated a prompt and thorough investigation, working closely with external cybersecurity experts. They have taken measures to protect the affected data and are offering identity theft protection services through IDX.

These services include credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.

Steps to Take if You Are Affected

If you have been affected by this breach, it is crucial to take immediate action to protect your personal information. Here are some recommended steps:

1. Enroll in Identity Protection Services: Utilize the identity theft protection services offered by SW Family Medicine through IDX. Visit IDX's enrollment page using the provided enrollment code.
2. Monitor Your Credit Reports: Regularly check your credit reports for any discrepancies or unauthorized activities. You are entitled to one free credit report every 12 months from each of the three major credit reporting agencies.
3. Place a Fraud Alert: Consider placing a fraud alert on your credit file. This is free and informs creditors of potential fraudulent activity, prompting them to verify your identity before opening new accounts.
4. Consider a Security Freeze: A security freeze on your credit file can prevent new accounts from being opened in your name without your consent. Contact each of the three major credit bureaus to initiate a freeze.
5. Stay Vigilant: Regularly review your financial statements and health insurance records for any suspicious activity. Report any discrepancies immediately to your financial institution or health insurance provider.