Patients of Rehoboth McKinley Christian Health Care Services are being notified that some of their private information may have been compromised. Not all patients of the hospital are affected.

In late January former HIPAA officer Dr. Phyllis Miller expressed her concerns about private information from RMCHCS appearing on the dark web.

Only weeks later, on Feb. 16, RMCHCS reported that certain patient information may have been removed from its computer network as a result of potential unauthorized activity it had been investigating.

The hospital said it hired a third-party forensic firm to investigate and help with remediation.

The investigation determined that an unauthorized party was able to access certain systems that contained patient information and remove some data between Jan. 21 and Feb. 5. The information may have included some, but not necessarily all of the following:

(1) Information to identify and contact the patient, such as name, date of birth, address, telephone number, and email address;

(2) Social Security number, driver’s license number, passport number, and/or tribal ID number;

(3) Health insurance information, such as  name of insurer, plan number, and member number;

(4) Medical information, such as Medical Record Number, dates of service, provider names, prescription information, treatment, and diagnosis information;

(5) Billing and claims information, including financial account information.

RMCHCS is providing free identity monitoring and restoration services to all individuals whose personal information  may have been involved, through an identity and privacy protection company named IDX, as well as a  guide that provides additional information on general steps individuals can take to monitor and protect  their personal information.

For questions or additional information, individuals should visit http://response.idx.us/rmchcs or call toll-free (833) 664-2006. This call center is open from 7 am-7 pm MDT, Monday - Friday, except holidays.