GPS Sango Family Dentistry, PLLC (doing business as “Sango Family Dentistry”) has experienced a data security incident that may have impacted data belonging to its employees and patients.
On August 27, 2024, our team became aware of unusual activity that disrupted access to our systems. Upon discovering this, we promptly took steps to secure our digital environment and engaged leading cybersecurity experts to assist with an investigation. They helped determine whether personal information was accessed or acquired without authorization. The investigation revealed that an unknown actor gained access to and obtained certain data from the Sango Family Dentistry network on or around August 27, 2024. Sango Family Dentistry then worked with additional experts to conduct a comprehensive review of the impacted data to identify the personal information involved.
The potentially involved personal and protected health information varied by individual and may have included names, Social Security numbers, driver’s license or state identification numbers, dates of birth, medical information, diagnoses, diagnosis codes, treatment information, provider names, health insurance information, billing or claim details, health benefit plan numbers, and subscriber member numbers.
Upon discovering the incident, Sango Family Dentistry took the steps referenced above to ensure data security. Sango Family Dentistry takes the security and privacy of personal information very seriously and has implemented additional safeguards to prevent similar incidents in the future.
To date, we are not aware of any evidence of misuse of the information potentially involved in this incident. However, on October 21, 2024, we notified potentially impacted individuals for whom we had identifiable home addresses. This notification provided information about the incident and steps individuals can take to protect their information. Additionally, Sango Family Dentistry offered complimentary identity protection services through CyEx to affected individuals.
We have established a toll-free call center to address questions and concerns related to the incident. Representatives are available Monday through Friday between 9:00 a.m. and 5:00 p.m. Central Time and can be reached at (857) 500-4313. All affected individuals may qualify for complimentary identity protection services through CyEx. Individuals who did not receive a notification letter may verify eligibility through the call center to enroll in services.
At Sango Family Dentistry, we are committed to safeguarding the privacy and security of all information entrusted to us. We appreciate your understanding regarding this matter.
While we are not aware of the misuse of any affected individual’s information, we are providing the following information to help those interested in protecting themselves and their personal information:
Review Your Account Statements and Notify Law Enforcement of Suspicious Activity
As a precaution, we recommend that you remain vigilant by reviewing account statements and credit reports closely. If you detect any suspicious activity, promptly notify the financial institution or company with which the account is maintained. You should also report any fraudulent activity or suspected identity theft to law enforcement, including Attorney General Jonathan Skrmetti and the Federal Trade Commission (FTC).
- To file a report with the Tennessee Attorney General, visit tn.gov/attorneygeneral or call 615-741-3491.
- To file a complaint with the FTC, visit IdentityTheft.gov or call 1-877-ID-THEFT (877-438-4338). Complaints filed with the FTC are added to the Identity Theft Data Clearinghouse, accessible to law enforcement agencies.
Obtain and Monitor Your Credit Report
We recommend obtaining a free copy of your credit report from each of the three major credit reporting agencies annually by visiting www.annualcreditreport.com, calling toll-free 877-322-8228, or by completing and mailing an Annual Credit Report Request Form to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348. Access the printable request form at https://www.annualcreditreport.com/manualRequestForm.action or complete the online form at https://www.annualcreditreport.com/requestReport/requestForm.action. Alternatively, you may choose to purchase a credit report by contacting one of the three national credit reporting agencies.
Contact information for the three national credit reporting agencies for the purpose of requesting a copy of your credit report or for general inquiries is provided below:
|
Equifax |
Experian |
TransUnion |
|
(866) 349-5191 |
(888) 397-3742 |
(800) 888-4213 |
|
P.O. Box 740241 |
P.O. Box 2002 |
2 Baldwin Place |
Consider Placing a Fraud Alert on Your Credit Report
We recommend placing a fraud alert on your credit report. An initial fraud alert is free and will stay on your credit file for at least 90 days. The alert informs creditors of possible fraudulent activity within your report and requests that creditors contact you before establishing any accounts in your name. To place a fraud alert on your credit report, contact any of the three credit reporting agencies identified above. Additional information is available at www.annualcreditreport.com.
Credit and Medical Information Report Monitoring
Sango Family Dentistry has arranged with CyEx to provide patients with credit and healthcare information monitoring for one year*, at no cost to patients. The Medical Shield Total package includes the following benefits:
- 3-Bureau Credit Monitoring
- Health Insurance Plan Number Monitoring
- Medical Record Number Monitoring
- Medical Beneficiary Identifier Monitoring
- National Provider Number Monitoring
- International Classification of Diseases Monitoring
- Health Savings Account Monitoring
- Dark Web Monitoring
- Victim Assistance
- $1 Million Identity Theft Insurance**
To take advantage of this offer, patients must follow these instructions:
- Visit app.medicalshield.cyex.com/enrollment/activate/sangoms
- Enter the patient’s unique Activation Code (provided in the notification letter sent on October 21, 2024).
- Click “Redeem Code.”
- Follow the prompts to create your account.
The deadline to enroll is January 19, 2025. After January 19, 2025, the enrollment process will close, and Activation Codes will no longer be active. If you do not enroll by January 19, 2025, you will not be able to take advantage of Medical Shield, so please enroll before the deadline. For assistance with the enrollment process or questions regarding Medical Shield, please call Medical Shield directly at (857) 500-4313.
Take Advantage of Additional Free Resources on Identity Theft
We recommend reviewing the tips provided by the Federal Trade Commission’s Consumer Information website, a valuable resource with helpful tips on protecting your information. Additional information is available at https://consumer.ftc.gov/identity-theft-and-online-security.
For more information, visit IdentityTheft.gov or call 1-877-ID-THEFT (877-438-4338).
A copy of Identity Theft – A Recovery Plan, a comprehensive guide from the FTC on protecting against and managing identity theft, can be found on the FTC’s website by clicking here.
Security Freeze
In some U.S. states, you have the right to put a security freeze on your credit file. A security freeze (also known as a credit freeze) makes it harder for someone to open a new account in your name. It is designed to prevent potential creditors from accessing your credit report without your consent. However, using a security freeze may interfere with or delay your ability to apply for new credit services that require a credit check.
You must place a security freeze separately with each credit reporting agency. To do so, you may be required to provide the consumer reporting agency with information that identifies you, including your full name, Social Security number, date of birth, current and previous addresses, a copy of your state-issued ID, and a recent utility bill, bank statement, or insurance statement. There is no charge to request or remove a security freeze.
What should I do if my family member was involved in the incident and is deceased?
You may choose to notify the three major credit bureaus (Equifax, Experian, and TransUnion) and request that they flag the deceased’s credit file. This will prevent the information from being used to open new accounts. To make this request, mail a copy of the death certificate to each company at the addresses above.
What should I do if my minor child or protected person’s information was involved in the incident?
You can request each of the three national credit reporting agencies to perform a manual search for a minor’s or protected person’s Social Security number to determine if an associated credit report exists. You may need to provide copies of identifying information for the minor and parent/guardian, including a birth or adoption certificate, Social Security card, and government-issued ID. If a credit report exists, you should request a copy and report any fraudulent accounts to the credit reporting agency.
Additionally, report any misuse of a minor’s information to the FTC at https://www.identitytheft.gov. For more information on Child Identity Theft and instructions for requesting a manual Social Security number search, visit the FTC website at https://www.consumer.ftc.gov/articles/0040-child-identity-theft.
Contact information for the three credit reporting agencies can be found above.
*Service term begins on the enrollment date, provided enrollment occurs within the approved enrollment period.
**Identity Theft Insurance is underwritten by subsidiaries or affiliates of American International Group, Inc. This description is intended for informational purposes only and does not include all terms, conditions, and exclusions of the policies described. Please refer to the actual policies for complete details. Coverage may not be available in all jurisdictions.
FEATURED IMAGE CREDIT: Mohamed Hassan from Pixabay.
