News
Notice of Vendor Incident
Friday, August 26, 2022
What Happened
Practice Resources, LLC (“PRL”) provides billing and other professional services to a number of healthcare entities, including Laboratory Alliance of Central New York. PRL is committed to safeguarding the privacy and security of the information entrusted to it. On April 12, 2022, they were subject to a ransomware attack (the “Incident”). With assistance from third-party experts, PRL took immediate steps to secure their systems and investigate the nature and scope of the Incident. As part of their extensive investigation, they worked diligently to identify any protected health information (“PHI”) and personally identifiable information (“PII”) that may have been subject to unauthorized access or acquisition as a result of the Incident. On or about June 5, 2022, PRL identified the individuals whose PHI and/or PII may have been impacted and are in the process of notifying those individuals. PRL found no evidence that information was misused as a result of this Incident.
Out of an abundance of caution, PRL is providing notices so that all potentially affected individuals can take steps to minimize the risk that their information will be misused. As an added precaution, PRL has arranged for Cyberscout (through Identity Force) to provide at least 12 months of free credit monitoring and related services to potentially affected individuals. To find out whether you were among those whose information was potentially affected, please contact 1-866-667-1465, from 8:00 am to 8:00 pm Eastern time, Monday through Friday, excluding holidays and enroll at https://secure.identityforce.com/benefit/practiceresources
PRL and Laboratory Alliance have treated all sensitive information in a confidential manner and are proactive in the careful handling of such information. Since the Incident, PRL has implemented a series of cybersecurity enhancements and will soon roll out others.
We have reviewed our internal systems, policies and procedures regarding data breaches of downstream entities. Laboratory Alliance has shifted its billing to another company and worked with PRL to close off and prohibit access to all Laboratory Alliance data and information contained on PRL servers. Importantly, no information onsite at Laboratory Alliance was effected, compromised, or otherwise accessed by unauthorized parties in any way.
Regards,
Icelyn Butler
Chief Executive Officer