Notice of Data Security Incident

We sincerely regret to report that Alabama Cardiovascular Group (“ACG”) experienced a security incident in which unauthorized parties accessed personal information in the ACG network. If you are a current or past patient of a physician at ACG, or a current or past guarantor, employee, or physician at ACG, your personal information may have been affected.

We are committed to protecting personal information and sincerely regret any issues this incident may cause. We are offering identity theft protection for all affected individuals.

What happened? On July 2, 2024, ACG became aware that unauthorized parties accessed the ACG computer network. ACG disconnected the ACG computer network from the internet and cut off the unauthorized access. To protect against an incident like this from reoccurring, ACG reset user passwords and implemented additional security measures.

ACG's investigation determined that between June 6, 2024 and July 2, 2024, unauthorized parties gained access to the ACG network and obtained personal information. ACG has been in contact with law enforcement.

What personal information was involved? The personal information that may have been accessed varied from person to person. It may have included name, address, email, phone number, demographic information such as date of birth, social security number, health insurance information and health insurance claims information, usernames and passwords, and medical information (such as dates of service, diagnoses, medications, images, lab results, and other treatment information). The personal information may also have included driver's license or passport numbers, credit card or debit card information, and bank account information if you had provided that type of information to ACG.

Will ACG notify individuals about this security incident? Yes. We will send letters to individuals whose personal information was affected as a result of this incident. If you are a current or past patient, patient guarantor, employee, or physician of ACG, you are likely affected and we would encourage you to activate the free 24 months of Experian IdentityWorks SM protection described below.

Is identity theft protection available? Yes. For all affected individuals, we are offering complimentary access to Experian IdentityWorks SM for 24 months. A credit card is not required for enrollment in Experian IdentityWorks℠. There are different instructions and activation codes for adults and minors below:

Adult Enrollees:

You will have access to the following features once you enroll in Experian IdentityWorks:

* Offline members will be eligible to call for additional reports quarterly after enrolling
** The Identity Theft Insurance is underwritten and administered by American Bankers Insurance Company of Florida, an Assurant company. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.

Minor Enrollees:

You will have access to the following features once you enroll in Experian IdentityWorks for your minor:

* The Identity Theft Insurance is underwritten and administered by American Bankers Insurance Company of Florida, an Assurant company. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.

If you believe there was fraudulent use of your information as a result of this incident and would like to discuss how you may be able to resolve those issues, please contact an Experian agent. After it is determined that identity restoration support is needed, an Experian Identity Restoration agent is available to work with you to investigate and resolve each incident of fraud that occurred from the date of the incident (including, as appropriate, helping you with contacting credit grantors to dispute charges and close accounts; assisting you in placing a freeze on your credit file with the three major credit bureaus; and assisting you with contacting government agencies to help restore your identity to its proper condition). The Terms and Conditions for this offer are located at www.ExperianIDWorks.com/restoration.

If you have questions about Experian IdentityWorks, need assistance with Identity Restoration that arose as a result of this incident, or would like an alternative to enrolling in Experian IdentityWorks online, please contact Experian's customer care team at 866-720-0894 toll-free Monday through Friday 8 am – 8 pm CST, closed Saturday and Sunday (excluding major U.S. holidays) by November 30, 2024. Be prepared to provide the engagement number above as proof of eligibility for the Identity Restoration services by Experian.

What else can you do to protect your personal information? We recommend you remain vigilant and consider taking the following steps:

Order your free credit report at annualcreditreport.com, call toll-free at 877-322-8228, or complete the Annual Credit Report Request Form on the U.S. Federal Trade Commission's (FTC) website at www.ftc.gov. When you receive your credit report, review the entire report carefully. Look for any inaccuracies and/or accounts you don't recognize and notify the credit bureaus as soon as possible in the event there are any. You have rights under the federal Fair Credit Reporting Act (FCRA). These include, among others, the right to know what is in your file; to dispute incomplete or inaccurate information; and to have consumer reporting agencies correct or delete inaccurate, incomplete, or unverifiable information. For more information about FCRA rights, see https://files.consumerfinance.gov/f/201504_cfpb_summary_your-rights-under-fcra.pdf.

Place a fraud alert on your credit file. A fraud alert helps protect you against an identity thief opening new credit in your name. With this alert, when a merchant checks your credit history when you apply for credit, the merchant will receive a notice that you may be a victim of identity theft and to take steps to verify your identity. You also have the right to place a security freeze on your credit file, which generally will prevent creditors from accessing your credit file at the three nationwide credit bureaus without your consent. Contact the credit bureaus below to learn more about these or to place a fraud alert or request a security freeze on your account. The credit bureaus may require that you provide proper identification prior to honoring your request.

Remove your name from mailing lists of pre-approved offers of credit for approximately six months. Pay close attention to all bills and credit card charges to check for items you did not contract for or purchase. Review all your bank account statements frequently for checks, purchases, or deductions not made by you. Note that even if you do not find suspicious activity initially, you should continue to check this information periodically since identity thieves sometimes hold on to stolen personal information before using it.

Change your passwords. ACG reset passwords for ACG accounts. However, if you use the same usernames and/or passwords across different sites, we recommend that you promptly change them.

Where can I get additional information? The FTC offers consumer assistance and educational materials relating to identity theft and privacy issues. You can learn more about how to protect yourself from becoming an identity theft victim, including fraud alerts and security freezes, by contacting the FTC at 877.IDTHEFT (1-877-438-4338), or www.ftc.gov/idtheft. The mailing address for the FTC is: Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue, NW Washington, DC 20580.

You may also contact your state’s Attorney General to obtain information about fraud alerts and security freezes, security breaches, and how to prevent identity theft. If you detect any incident of identity theft or fraud, promptly report the incident to your local law enforcement authorities, your state Attorney General, and/or the FTC. You may also obtain a copy of police reports.

For District of Columbia Residents: Office of the Attorney General for the District of Columbia, 441 4th Street, NW, Washington, DC 200001, 202.727.3400, oag.dc.gov.

For Maryland Residents: Maryland Attorney General at: 200 St. Paul Place, Baltimore, MD 21202, 888.743.0023, https://www.marylandattorneygeneral.gov.

For New York Residents: New York Attorney General, 212-416-8433 or https://ag.ny.gov/resources/individuals/credit-lending/identity-theft
NYS Department of State's Division of Consumer Protection, 800-697-1220 or https://dos.ny.gov/consumer-protection.

For North Carolina Residents: North Carolina Attorney General at: 9001 Mail Service Center, Raleigh, NC 27699, 1-877-566-7226, ncdoj.gov.

For Rhode Island Residents: Rhode Island Attorney General's Office, 150 South Main Street Providence, RI 02903; Phone: 401-274-4400; Website: www.riag.ri.gov.

Do you have other questions? We have answered frequently asked questions below. If you still have questions after reviewing these FAQs, please call 866-720-0894.

  1. Can I sign up for identity theft services before I get a letter? Yes. If you are a current or past patient, patient guarantor, employee, or physician at ACG, you can sign up now for the free 2-year membership to Experian® IdentityWorks℠ credit monitoring service.
  2. I am no longer a patient of ACG. Should I sign up for identity theft protection? Yes. If you are a past patient at ACG, we encourage you to sign up for the free 2-year membership to Experian® IdentityWorks℠ credit monitoring service.
  3. Should I worry about identity theft? It is possible your personal information may be misused by the unauthorized parties, so we suggest you sign up for the free 2-year membership to Experian® IdentityWorks℠ credit monitoring service.
  4. Have you called the police? Yes, ACG has been in contact with law enforcement.
  5. Should I close my bank account? If you provided bank account information to ACG (such as account number and bank routing information), it is possible that information was accessed by the unauthorized parties. While we do not believe PIN or other credentials were included that would allow the unauthorized parties to access your bank accounts, you may wish to contact your bank to discuss next steps. We also encourage you to sign up for the complimentary 24-month membership to Experian® IdentityWorks℠ credit monitoring service.
  6. Should I close my credit card or debit card? The investigation found that some credit card/debit card numbers were included in the personal information accessed. If you provided credit card or debit card payment information to ACG, we suggest that you contact your credit card company or bank to discuss next steps. We also encourage you to sign up for the complimentary 24-month membership to Experian® IdentityWorks℠ credit monitoring service.

ACG is a dba of Affinity Cardiovascular Specialists, LLC, and an affiliate of Birmingham Holdings, LLC.