CYBER-SECURITY INCIDENT INVOLVING PRE-2017 MEDICAL RECORDS
ON 08/10/2026, THE SPEECH CLINIC (TSC) STAFF BEGAN EXPERIENCING TECHNICAL DIFFICULTIES INVOLVING A COMPUTER AT THE WAYCROSS OFFICE. DURING EFFORTS TO RESOLVE THE ISSUE, TSC SUBSEQUENTLY DETERMINED ON 08/17/26, THAT THE COMPUTER HAD BEEN SUBJECTED TO UNAUTHORIZED REMOTE DESKTOP ACCESS, AND LATER DETERMINED THAT A SECOND COMPUTER AND AN OLDER TSC SERVER HAD ALSO BEEN COMPROMISED.
THE OLDER SERVER CONTAINED THE PRE-2017 TSC PATIENT RECORDS OF APPROXIMATELY 2,100 PATIENTS. THE MAJORITY OF THE AFFECTED PATIENTS HAVE BEEN NOTIFIED VIA LETTER TO THEIR LAST KNOWN ADDRESS. THIS POSTING IS INTENDED TO PROVIDE SUBSTITUTE NOTICE TO THOSE TSC HAD NO SUCH ADDRESS FOR. WE HAVE ALSO PROVIDED NOTICE OF THIS CYBER SECURITY INCIDENT TO LOCAL MEDIA OUTLETS.
THE TYPES OF PROTECTED HEALTH INFORMATION (PHI) CONTAINED WITHIN THESE PRE-2017 MEDICAL RECORDS VARIED BY PATIENT. IN SOME CASES, THE PHI CONSISTED OF ONLY A NAME. IN OTHER CASES THEY MAY HAVE ALSO INCLUDED SOCIAL SECURITY NUMBERS, DATES OF BIRTH, DIAGNOSES AND OTHER MEDICAL INFORMATION.
DESPITE CONSULTING WITH APPROPRIATE OUTSIDE EXPERTISE, TSC WAS UNABLE TO DETERMINE DEFINITIVELY THAT THE PRE-2017 MEDICAL RECORDS WERE ACTUALLY ACCESSED BY THE UNAUTHORIZED PERSONS, TSC WAS ALSO NOT ABLE TO RULE OUT THE POSSIBILITY EITHER. TSC DOES KNOW THAT THE PRE-2017 MEDICAL RECORDS WERE VULNERABLE TO ACCESS FROM THE COMPROMISED SERVER AND THUS ARE PROVIDING THIS NOTICE. TSC ISOLATED THE COMPROMISED SERVER ON 08/17/26 AND NEUTRALIZED THE CONTINUING THREAT TO IT. TSC WOULD ALSO ENCOURAGE AFFECTED PATEINTS TO REVIEW INFORMATION REGARDING IDENTITY THEFT PROTECTION AND FRAUD PREVENTION AVAILABLE FROM THE FEDERAL TRADE COMMISSION AT HTTP://WWW.FTC.GOV/BCP/EDU/MICROSITES/IDTHEFT/CONSUMERS/DETECT.HTML
IF YOU WERE A PATIENT OF TSC PRIOR TO 2017 AND WOULD LIKE MORE INFORMATION YOU MAY EMAIL US AT SUPPORT@THESPEECHCLINIC.ORG OR CALL 1-844-775-3107.