January 21, 2020
Sunshine Behavioral Health Group, LLC (“Sunshine”) recently experienced a privacy incident that affected the protected health information of some Monarch Shores patients and personal information of individuals who provided payment information for Monarch Shores patients (collectively, “personal information”). Sunshine provides business services to several health care providers, including Monarch Shores. Sunshine is not aware of any malicious misuse of this personal information, but has provided the following information to Monarch Shores out of an abundance of caution so potentially affected individuals can take steps to help safeguard their personal information, if they feel it is appropriate to do so.
On September 4, 2019, Sunshine became aware that a cloud-based system used to store certain Monarch Shores patient records was inadvertently set-up in such a manner that permitted the records to be made available on the Internet. Sunshine immediately took steps to change the settings, and, on November 14, 2019, took additional actions to remove the records from general Internet access. Through an ensuing investigation, on December 23, 2019, Sunshine determined that the incident potentially affected the personal information of some Monarch Shores patients and individuals who provided payment information for Monarch Shores patients. Such personal information varies by impacted individual, and may include the following: first and last name and other demographic and contact information; financial account information; clinical and medical information; health insurance, claims and account balance information; and electronic or digital signature. A small subset of individuals also had their Social Security numbers impacted by the incident.
To get further information, including whether you were affected by the incident and what personal information may have been impacted by the incident, you may call Sunshine’s dedicated assistance line at (833) 719-0129 (toll free), Monday through -Friday, 9:00 a.m. to 9:00 p.m., EST. If Sunshine has confirmed that your personal information was affected by the incident, Sunshine is offering MyIDCare protection through ID Experts for 24 months at no cost.
We recommend that you remain vigilant by reviewing account statements and monitoring free credit reports. You may also report suspected incidents of identity theft to local law enforcement or your state attorney general.
If you would like information about placing fraud alerts or credit freezes, you can contact one of the three major credit bureaus: