Allwell reports security breach, patient and employee information leaked
ZANESVILLE — Allwell Behavioral Health Services is reporting a security breach that involved patient information.
It is believed patients' names, dates of birth, Social Security numbers, phone numbers, treatment activity, treatment providers, treatment dates, treatment locations and payer information were leaked. Employee information was also leaked.
According to a news release from Lewis Brisbois, a Washington D.C.-based law firm representing Allwell, the Zanesville-based company found out about the security breach on March 5 and immediately notified the FBI and the Department of Homeland Security.
The release does not say how many patients or employees were affected and in which communities, and why there was an 11-week delay between the discovery of the breach and notification to patients. Questions posed by the Times Recorder were not directly addressed by Lewis Brisbois.
An investigation that concluded in late April found no evidence that any of the affected information was or will be misused, according to the release.
Patients weren't notified of the breach until Monday. Allwell has offices in Muskingum, Coshocton, Perry, Guernsey, Morgan and Noble counties.
Lewis Brisbois issued the following statement:
“Immediately after Allwell discovered the incident, we took steps to mitigate its impacts and prevent future recurrence. We also began an investigation to determine if there had been unauthorized access to personal information on Allwell’s systems. Out of an abundance of caution, as soon as that investigation was completed, we elected to notify all of our patients and employees of the incident. We have provided all of our patients and staff with complimentary credit monitoring services, identity theft protection and identity theft recovery services, and dark web monitoring services. We have also provided a $1 million identity fraud loss reimbursement policy.”
ecouch@gannett.com
740-334-3522
Twitter: @couchreporting
This article originally appeared on Zanesville Times Recorder: Allwell security breach: Patient and employee information leaked
