Tennova patients’ personal data leaked after Community Health Systems software breach

CLARKSVILLE, TN (CLARKSVILLE NOW) – Tennova’s parent company, Community Health Systems (CHS) experienced a data breach in January that resulted in the release of some patients’ names, addresses, medical billing, insurance information, diagnoses, medication and demographic information such as date of birth and Social Security number.

CHSPSC is a professional services company that provides services to hospitals and clinics affiliated with Community Health Systems. They were notified by Fortra, a contracted cybersecurity firm and third-party vendor, that an unauthorized party accessed personal information on their system between Jan. 28 and 30.

CHSPSC has 78 hospitals in 15 states, including all Tennova locations in Tennessee. Fortra contracts with CHSPSC to provide a secure file transfer software called GoAnywhere, which is the system hat was breached.

“We understand several other companies were impacted by this security incident as well,” said CHS spokeswoman Rebecca Pitt.

“Both CHSPSC and Fortra have been in contact with law enforcement, including the Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency, and are supporting law enforcement’s investigation,” CHS said on their website.

Fortra said the incident was contained shortly after it was discovered.

Has your information been released?

Those whose personal information was compromised are receiving direct notifications by U.S. mail. Anybody with inquiries should dial 1-800-906-7947. For further information, you may also check out the Community Health System website.

“To help protect your or your minor’s identity, we are offering a complimentary 24-month membership of Experian’s IdentityWorks. This product provides superior identity detection and resolution of identity theft,” CHSPSC said. “CHSPSC is making available ID restoration and credit monitoring services for the period required by applicable state law, which will be 24 months, at no cost to you, through Experian to all potentially affected individuals who enroll. ”

“Safeguarding the privacy of the personal information our patients, employees, and communities entrust to us is a responsibility we take very seriously. We will do everything we can to support individuals affected by Fortra’s security incident,” Pitt said.