Notice of Data Security Incident
January 22, 2024 – Kansas Joint & Spine Specialists notified certain current and former patients and employees that their personal information may have been accessed as part of a cybersecurity incident. Kansas Joint & Spine Specialists takes the privacy and security of information in its possession very seriously and sincerely apologizes for any inconvenience this incident may cause. This notice is intended to alert potentially impacted patients and employees of the incident, and steps we are taking in response, and resources available to assist and protect individuals.
What Happened
On or around June 20th, 2023, we detected a network security incident, in which an unauthorized third party accessed our network system. We immediately took corrective mitigating action to secure the network environment and investigate the extent of any unauthorized activity. Our investigation, which concluded on January 3, 2024 determined an unauthorized third party may have accessed certain individual personal information during this incident.
What Information Was Involved
It is possible that the following personal information could have been accessed by an unauthorized third party: first and last name, mailing address, date of birth, contact information, diagnosis, health insurance claim number, medical record number, bank account information (such as checking number and routing number), driver’s license number, social security number and other unique characteristics that could identify an individual.
What We Are Doing
Data privacy and security are our highest priorities. Upon detecting this incident, we moved quickly to initiate a response which included retaining a third party cybersecurity forensics firm to conduct an investigation of the unauthorized activity and confirming the security of our network environment. We conducted a forced password reset on our network system and installed multi-factor authentication to harden access to the system. We also rebuilt our systems utilizing strengthened security measures. Lastly, we reviewed and altered our policies, procedures, and network security logging relating to the security of our systems and servers.
For More Information
We recognize that you may have questions not addressed in this notice. If you happen to have additional inquiries, please contact us at (316) 219-8299.
Kansas Joint & Spine Specialists sincerely apologizes for any inconvenience this incident may cause to members of its community and remains dedicated to maintaining the security and protection of all information in its control.