Chicago Sun-Times

DUPAGE MEDICAL GROUP NOTIFYING 600,000 PATIENTS ABOUT DATA BREACH

- BY MITCH DUDEK, STAFF REPORTER mdudek@suntimes.com | @mitchdudek

DuPage Medical Group on Monday announced it will mail letters to 600,000 patients notifying them their personal informatio­n may have been compromise­d last month when its computer network was hacked.

DuPage Medical Group is the largest independen­t physician group in Illinois.

Patients’ personal informatio­n may include names, addresses, dates of birth, diagnosis codes and informatio­n on medical procedures and treatment dates. The hackers may have accessed the Social Security numbers for a smaller number of people, the medical group announced in a news release.

“To date, DMG has no evidence that any informatio­n has been subject to actual or attempted misuse as a result of this incident. This event did not impact financial account numbers,” the medical group said.

DMG became aware of the security breach July 13 and is working with cyber-forensic specialist­s to “determine the full nature and scope of the incident.”

The “security incident” caused by “unauthoriz­ed actors” disrupted the medical group’s computer network. The unauthoriz­ed access occurred July 12 and 13.

“On August 17, 2021, we determined that certain files stored within our environmen­t that contained patient informatio­n may have been impacted by this incident,” the group said.

The medical group is offering credit monitoring and identity theft protection at no cost to patients who may have been affected.

Additional security measures have been put in place, the medical group said.

Patients who have questions can call 1-800-709-2027 between 8 a.m. to 8 p.m. Monday through Friday or by visiting www. dupagemedi­calgroup.com.

Newspapers in English

Newspapers from United States