Keenan & Associates report Cybersecurity Incident

Northern Inyo Healthcare District (“NIHD”) contracts with Keenan & Associates (“Keenan”), an insurance brokerage company that provides insurance-related risk management, and claims services. On December 11, 2023, Keenan reported to NIHD a cybersecurity incident that involved the protected health Information of certain of NIHD’s current employees, former employees, and their dependents.

Keenan reported that on Sunday, August 27, Keenan discovered certain disruptions occurring on some Keenan network servers. Keenan immediately began investigating the issue and discovered suspicious activity on a limited number of servers. As a precaution, Keenan disconnected the entire network to contain the incident and engaged leading third-party cybersecurity and forensic experts to assist in the investigation and remediation, and notified law enforcement. Within hours of identifying the incident, Keenan had contained it.

Keenan’s investigation determined that an unauthorized party gained access to certain Keenan internal systems at various times between approximately August 21, 2023 and August 27, 2023. Findings from the investigation indicate that the unauthorized party obtained some data from certain Keenan systems during this period. Keenan was able retrieve the data involved from the unauthorized party and has taken steps to delete the data. At this time, Keenan has no reason to believe this data was further copied or retained by the unauthorized party.

Keenan is not aware of any fraud or misuse of any personal information as a result of this incident. Keenan does not believe personal information was targeted by the unauthorized party for identity theft purposes, but rather, such information happened to be included in documents taken by the unauthorized party as part of the ransomware incident to extort the company. To help prevent a similar type of incident from occurring in the future, Keenan implemented additional security protocols designed to enhance the security of its network, internal systems and applications. Northern Inyo is committed to maintaining the security of patients’ protected health information and will continue to closely monitor the security of its vendors.

If you believe you may have been affected, and have not yet received a notice by USPS mail, please contact Keenan at 833-804-0859, Monday through Friday, between 6:00 a.m. and 6:00 p.m. Pacific Time.

LINK TO OFFICIAL NOTICE

----------------------------------------------------------

About Northern Inyo Healthcare District: Founded in 1946, Northern Inyo Healthcare District features a 25-bed critical access hospital, a 24-hour emergency department, a primary care rural health clinic, a diagnostic imaging center, and a rehabilitation service for physical, occupational, and speech-language therapy. We also offer clinics specializing in orthopedics, cardiology, urology, women’s health, pediatrics and allergies, general surgery, colorectal surgery, and breast cancer surgery. Continually striving to improve the health outcomes for those who rely on us for care, NIHD aims to improve our communities, one life at a time. One team, one goal, your health.