Notice Regarding Recent Data Security Incident at Foursquare Healthcare, Ltd.
Updated January 10, 2024
Foursquare Healthcare, Ltd. (“Foursquare”), a provider of short-term and long-term rehabilitation and care, recently experienced a data security incident affecting the personal information of its patients and employees. Foursquare believes the incident has been contained, and it continues to monitor its systems for any suspicious activity. As of the date of this notice, there is currently no evidence that the information has been misused for identity theft or fraud in connection with this incident.
What happened?
On September 27, 2023, Foursquare experienced a ransomware incident that affected its internal computer systems. Foursquare took immediate action to secure its systems and launched an investigation with help from cybersecurity experts. The investigation determined that an unauthorized person accessed the network between September 27, 2023 and September 29, 2023, and acquired a subset of Foursquare’s files.
Foursquare promptly began a thorough review of all potentially accessible data on the affected server to determine the scope of information and individuals potentially impacted by the Incident. On January 8, 2024, Foursquare began notifying individuals whose personal information was found on the impacted server and for whom it was able to locate valid contact information to date. Please note receipt of this notice does not mean that your information was actually accessed and/or acquired by the unauthorized third party, but only that it was contained on the server subject to unauthorized access. Foursquare has received assurances that the extracted data has been deleted, and there is no evidence of any material disruption to the care and services Foursquare provides to patients and communities.
What information was impacted?
The information contained in the files varied by individual, but may have included individuals’ name, email address, social security number, date of birth, clinical and medical treatment information, health insurance information, username and password information, banking and other financial or payment information, demographic information (such as address and zip code), and other personally identifying information regarding their care at Foursquare clinics. These are general categories of information that were involved in the Incident, and not all of the listed categories apply to each affected individual.
What are we doing?
To help prevent similar occurrences in the future, Foursquare will continue to monitor its systems for any suspicious activity and has implemented numerous additional measures designed to enhance the security of its network, systems, and data, and it has completed a reset of all passwords for its systems. Foursquare will continue to evaluate ways to further enhance the security of its systems to minimize the likelihood of similar incidents occurring in the future.
In the meantime, as an added precaution and to relieve concerns, Foursquare is offering affected individuals complimentary credit monitoring and identity protection services through IDX, A ZeroFox Company, the data breach and recovery services expert. IDX identity protection services include: 2 years of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed id theft recovery services. With this protection, IDX will help you resolve issues if your identity is compromised.
Foursquare began mailing these notices out on January 8, 2024 to individuals whose contact information was able to be located, and it is continuing to work on locating contact information for the remaining individuals. If you believe your personal information may have been affected but you did not receive a notice, please call the IDX customer service line listed below to confirm whether you might be affected.
What can you do?
Although there is no evidence to date that affected individuals’ has been misused for identity theft, Foursquare encourages you to contact IDX with any questions and, for affected individuals, to enroll in the complimentary credit monitoring and identity protection services by calling 1-888-337-5589, going to https://response.idx.us/foursquare, or scanning the QR image and using the Enrollment Code provided on your letter (if applicable). IDX representatives are available Monday through Friday from 8am - 8pm Central Time. Please note the deadline to enroll is April 8, 2024 for individuals who received a letter dated January 8, 2024. If you believe your information was involved and have any questions about this incident, please call 1-888-337-5589 or visit IDX’s support site at https://response.idx.us/foursquare. IDX representatives are available Monday through Friday from 8am - 8pm Central Time.
In the meantime, although there is no evidence that this information has been used to perpetuate identity theft, Foursquare encourages its patients and employees to remain vigilant against potential identity theft and fraud by carefully reviewing credit reports and account statements to ensure that all activity is valid. Consumers have the right to place an initial or extended “fraud alert” on a credit file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert, which is a fraud alert lasting seven years. Alternatively, you have the right to request a security freeze from a consumer reporting agency, free of charge. A security freeze will ensure potential creditors and other third parties are unable to access your credit report without your consent to lift the freeze. Therefore, using a security freeze may delay your ability to obtain credit. Should you wish to place a fraud alert or security freeze, please contact any one of the three major credit reporting bureaus listed below.
You may also order a credit report. You are entitled to receive a free credit report annually from each of the three credit bureaus listed above, by visiting www.annualcreditreport.com, or by calling toll free at 1-877-322-8228. You may obtain additional information about how to avoid identify theft from the Federal Trade Commission, which can be contacted by mail at Consumer Response Center, Washington, DC 20580, through their toll free helpline by calling 1-877-ID-THEFT (1-877-438-4338), or through their website at www.annualcreditreport.com.
Foursquare takes the privacy and security of the information in its care very seriously and sincerely regrets any inconvenience this incident may cause. To minimize the likelihood of a similar occurrence in the future, Foursquare strengthened the security of its systems and will continue enhancing its protocols to safeguard the information in its care. Foursquare will be opening a dedicated, toll-free call center as detailed in the upcoming notices to affected individuals in the coming weeks. Please continue to check back here periodically for updates.