October 2023
What Happened?
On or about August 19, 2023, Edward C. Taylor, PhD., PL (the “Company”) discovered certain suspicious activity indicative of a potential security incident. The Company immediately responded to minimize any resultant impact of the incident. The Company also notified law enforcement and engaged an outside forensics team to conduct a full investigation. The investigation, which recently concluded, confirmed the narrow scope of the incident, which was limited to a one-day period, but also led to a discovery on or around October 5, 2023 that certain Company information was taken, without authorization, as part of the incident. Although the investigation did not reveal what, if any, personal information may have been accessed or exfiltrated as a result of the incident, the Company is providing written notice as a conservative measure directly to those persons who it has determined could potentially be affected because it takes the confidentiality of its information very seriously, values transparency and wishes to keep potentially impacted individuals informed.
What Information Was Involved?
The investigation did not reveal whether any personal information was included in the information that was exfiltrated. Nonetheless, personal information such as name and contact information, date of birth, insurance information, if applicable, and information relating to mental health, including clinical information, and diagnoses, could potentially have been involved.
What We Are Doing
In order to protect against similar incidents in the future, the Company is taking several precautionary measures, such as changing passwords and modifying internal settings and controls. The Company also notified law enforcement and worked diligently with leading experts, including a forensics firm, to investigate and confirm the incident’s limited scope and ensure the integrity and security of its systems.
As noted, the Company is providing separate written notice directly to individuals it has determined could have potentially been affected, using their last known address, as a conservative measure. That written notice contains recommended steps and contact information for recipients to use for further inquiries. A call center, 833-514-1014, has been established to handle inquiries relating to this matter toll-free Monday through Friday from 8 am – 10 pm Central, or Saturday and Sunday from 10 am – 7 pm Central (excluding major U.S. holidays).
Thank you.