NOTICE OF DATA SECURITY INCIDENT

RHA Anadarko (“Anadarko Hospital” or “we”) recently became aware of an incident that may affect the privacy of information related to certain patients. While we have no evidence of attempted or actual misuse of information in relation to the incident, we are providing potentially affected individuals with details about the incident and steps individuals may take to help protect their personal information should they feel it is necessary to do so.

What Happened? On October 29, 2021, we discovered the primary shared directory used to document surgery information could no longer be found on our servers and initiated an investigation. As part of the investigation, we determined that an employee of our now former surgical group, Southern Plains Medical Center (“Southern Plains”), entered Anadarko Hospital on October 28, 2021 and accessed an Anadarko Hospital computer. The employee then downloaded a copy of the surgery directory information to the Southern Plains One Drive without authorization. The contractual relationship between Anadarko Hospital and Southern Plains ended on October 28, 2021. While Southern Plains was once authorized to possess this information and we have no reason to believe this information has been or will be misused, Southern Plains is no longer authorized to possess this information. To date, our efforts to recover these files from Southern Plains have been unsuccessful. Anadarko Hospital therefore undertook a comprehensive review of the contents of the surgery directory to determine what information was present and notify affected individuals.

What Information Was Involved? The types of information stored in the directory includes patient name, date of birth, surgery case logs, records of surgeries performed in the hospital, surgical processes and procedures and physician preferences.

How Will Individuals Know if They Are Affected By This Incident? Anadarko Hospital will be mailing notice letters to individuals for whom they have valid mailing addresses whose protected information was contained in the surgery directory. If an individual does not receive a letter but would like to know if they may be affected by this incident, they may call the number provided below.

What We Are Doing. Anadarko Hospital takes the security of information in its care very seriously. In addition to the investigation, Anadarko Hospital is taking steps to try to retrieve the surgery directory from Southern Plains.

What You Can Do. We encourage you to pay attention to Explanation of Benefits you receive and report suspicious activity to your insurance carrier or the medical provider listed.

For More Information. We understand you may have questions about the incident that are not addressed in this notice. If you have questions, please call 855-604-1741, Monday through Friday, from 8:00 a.m. to 8:00 p.m. Central Time. You may also write to Anadarko Hospital at 1002 E. Central Blvd, Anadarko, OK 73005.

We sincerely apologize for this incident and regret any concern or inconvenience this may cause you.