Potential Breach of Protected Health Information

TO: All clients referred to ChangePoint by Washington County between 2010-2014

RE: Potential Breach of Protected Health Information

Posted: December 8, 2017

This notice is provided under the Health Insurance Portability and Accountability Act (HIPAA) and is to inform you about a recent potential breach of your personal information that occurred on or around October 18, 2017.

On approximately October 18, 2017, ChangePoint, a former contracted provider of Washington County, left its storage unit unlocked for some time between two days and two weeks. ChangePoint kept old client records in the storage unit, which is behind a locked gate. The files included protected health information for drug and alcohol treatment.

After Washington County became aware of this potential breach, we removed all of the records of clients we referred to ChangePoint from the storage facility. This potential breach was caused by ChangePoint and not Washington County. ChangePoint has gone out of business.

Because the storage unit was behind a locked gate and there is no indication that anyone entered the storage unit, we believe the risk of compromise to your personal and protected health information is low. However, you may consider taking the following steps:

  1. Call the toll-free numbers of any of the three major credit bureaus to place a fraud alert on your credit report. This can help prevent an identity thief from opening additional accounts in your name. As soon as the credit bureau confirms your fraud alert, the other two credit bureaus will automatically be notified to place alerts on your credit report. 

    P. O. Box 740241
    Atlanta, GA 30374

    P. O. Box 9532
    Allen, TX 75013

    Trans Union, LLC
    P. O. Box 6790
    Fullerton, CA 92834

  2. Order your credit reports. By establishing a fraud alert, you will receive a follow-up letter that will explain how you can receive a free copy of your credit report. When you receive your credit report, examine it closely and look for signs of fraud, such as credit accounts that are not yours.

  3. Continue to monitor your credit reports. If you find any suspicious activity on your credit reports, call your local police or sheriff’s office.

Additional information about identity theft can be obtained from the Federal Trade Commission at http://www.consumer.ftc.gov/ or by reviewing information about the Oregon Identity Theft Protection Act at https://www.doj.state.or.us/consumer-protection/id-theft-data-breaches/identity-theft/.  

Please note that Washington County will not contact you to confirm any personal information, so if an unknown person should contact you, do not give out any additional information.

We take very seriously our role of safeguarding your personal information and using it in an appropriate manner.

You may call us toll-free at 1-833-226-3845 during regular business hours with any questions or concerns you have about loss of your personal information. You may also contact Kathy Prenevost at 503-846-4528 regarding this incident.