Bluegrass Care Navigators Notifies Patients of Data Security Incident

Lexington, KY – April 15, 2024 – Bluegrass Care Navigators (“BCN”) was the target of a data security incident that resulted in some individuals’ personal information being accessed. In an abundance of caution, BCN has taken steps to notify all potentially affected individuals and to provide resources to assist them.

On March 4, 2024, we discovered that an unauthorized individual(s) gained access to an employee's email account. Upon discovering this unauthorized access, our dedicated Cybersecurity team, in collaboration with independent forensics experts, took immediate action to expel and block the unknown individual from further access. An investigation was conducted to determine what information may have been at risk. There was no indication that our network or any other email accounts were compromised.

Our investigation discovered that the unknown individual managed to access two files containing limited patient demographics information. This information may include one or more of the following: patient's name, insurance, and policy number. We want to emphasize that the attacker did not gain access to our Electronic Medical System, which houses our patient medical information.

Safeguarding the security and privacy of our constituents' data is our top priority. To further fortify our email systems, Bluegrass Care Navigators has already implemented crucial changes.

We have mailed notice to those individuals potentially impacted by this incident which includes information about the incident and steps individuals can take to monitor and protect their personal information. Additionally, we have also established a toll-free call center to answer questions about the incident and related concerns. The call center is available Monday through Friday from 7:00 a.m. to 7:00 p.m. Eastern time and can be reached at (855) 202-1779.

We deeply regret any inconvenience this incident may have caused you. Your trust is of paramount importance to us, and we remain committed to safeguarding your personal information.

The following information is provided to help individuals wanting more information on steps they can take to protect themselves:

How do I obtain a copy of my credit report?

You may obtain a copy of your credit report, free of charge, whether or not you suspect any unauthorized activity on your account. You may obtain a free copy of your credit report from each of the three nationwide credit reporting agencies. To order your free credit report, please visit www.annualcreditreport.com, or call toll-free at 1-877-322-8228. You can also order your annual free credit report by mailing a completed Annual Credit Report Request Form (available at www.consumer.ftc.gov/articles/0155-free-credit-reports) to: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA, 30348-5281.

How do I put a fraud alert on my account?

You can place fraud alerts with the three credit bureaus by phone and online with Equifax , Experian or Transunion . A fraud alert tells creditors to follow certain procedures, including contacting you, before they open any new accounts or change your existing accounts. For that reason, placing a fraud alert can protect you, but also may delay you when you seek to obtain credit. Initial fraud alerts last for one year. Victims of identity theft can also get an extended fraud alert for seven years. The phone numbers for all three credit bureaus are at the bottom of this page.

Contact information for the three nationwide credit reporting agencies is as follows: