Notice of Breach

12/17/2020

St. Francis Medical Center highly values its patients and has deep respect for the privacy and security of their information. In that spirit and as a precautionary measure, we are publishing this notice regarding a security incident involving some of our patients’ information.

St. Francis Medical Center (St. Francis) contracts with IBERIABANK to provide a lockbox for collecting and processing payments from its customers and/or patients. One of their service providers, Technology Management Resources, Inc. (TMR), was affected by this incident. Although this incident did not affect IBERIABANK’s or St. Francis’ internal computer systems, we wanted to provide information regarding TMR’s incident and the resources available to help protect our patients’ information, should one feel it appropriate to do so.

On July 3, 2020, TMR discovered that a TMR employee’s user account had been compromised. Upon discovery of the incident, TMR reported that they secured the account and began an investigation in consultation with external cybersecurity professionals. TMR has stated that their investigation determined that the images of checks and related images containing potential Protected Health Information (PHI) related to customers of St. Francis may have been viewed. According to TMR, this occurred between August 5, 2018 and May 31, 2020, with the bulk of the activity occurring between February and May 2020. TMR notified the FBI of this incident. IBERIABANK notified St. Francis on November 4, 2020 of the incident and subsequently provided details that allowed us to conduct our own investigation. Through that investigation, we were able to determine that some of our patients’ information may have been included in the incident.

The potential patient information involved included images of bills, explanation of benefits and insurance company remittances and checks for payment. While an individual’s information may not have been included in all these forms, it could have been any of the following items: Patient Name, Address, Telephone Number, Drivers’ License, Date of Birth, Medical Record Number, Insurance Member ID number, Insurance Policy Number, Hospital Account Number, Claim Number , Dates of service, Claim Notes, Diagnosis/Procedure/Medication codes , Diagnosis/Procedure/Medication description, Last four characters of your Social Security Number , Full Social Security Number, Physician name, and Guarantor name. The checks contained some patient names, addresses, and driver’s license numbers and may have contained some telephone numbers.

While we believe the risk is low, we are committed to transparency and being in full compliance with laws that govern the confidentiality of your information. If one’s information was involved, IBERIABANK has agreed to provide complementary credit monitoring and identity theft protection through CyberScout. The individual must notify St. Francis to obtain a unique code that is required for enrolling in the credit monitoring and identity theft protection. In addition, IBERIABANK is reviewing relevant business practices regarding the security of information maintained by TMR. TMR reports that they have taken several corrective actions to remediate the security incident, prevent a further security incident, and mitigate the effects of the security incident. According to TMR, TMR credentials have been reset or deactivated (as applicable). TMR also reports that they implemented additional rules in their firewall to more tightly control the ability to access the I Remit website from other countries, among other steps taken.

If an individual that was a patient and received services from the former P & S Hospital during that time period, they can call us for confirmation of exposure and if their information was exposed, they may obtain further instructions regarding provision of free credit monitoring. As a best practice, we encourage involved individuals to remain vigilant against incidents of identity theft and fraud, to review their financial account statements and all claims information from their health insurance provider, and to monitor credit reports for suspicious activity.

If an individual has additional questions about the Technology Management Resources security incident or the protections available to them, they may call 1‐888‐905‐0513, toll‐free, Monday through Friday, 9:00 am – 9:00 pm Eastern Time. If there are questions directly for St. Francis, one may call 1-318-966-4879 and leave a message. St. Francis apologizes for any inconvenience this TMR security incident may have caused our patients.

Sincerely,

Jamie Hohlt, RHIA, CHC
Compliance and Privacy Officer
Franciscan Missionaries of Our Lady Health System
Corporate Integrity | Monroe Market
About Our Lady of the Lake

Our Lady of the Lake is a not-for-profit healthcare ministry based in Baton Rouge, Louisiana with more than 7,500 employees committed to serving the Capital Region and building a healthy community through excellence in patient care and education. With an 800-bed Regional Medical Center, a dedicated Children’s Hospital, a 78-bed hospital in Gonzales, Louisiana, two freestanding emergency rooms, and a 500+ provider Physician Group, Our Lady of the Lake provides comprehensive healthcare services for common to complex conditions. Our Lady of the Lake Regional Medical Center is a primary teaching site for graduate medical education programs and is recognized in the areas of heart and vascular, trauma and emergency care, stroke, cancer care, minimally-invasive procedures and more. Our Lady of the Lake is part of the Franciscan Missionaries of Our Lady Health System.

About Our Lady of the Lake Children’s Hospital

Our Lady of the Lake Children’s Hospital is Louisiana’s fastest growing children’s hospital treating more than 100,000 patients annually from across Louisiana, Mississippi and Texas. The hospital is the only healthcare provider in the Baton Rouge area that provides a full range of pediatric services ranging from a 24/7 pediatric emergency room to a team of more than 100 pediatricians and pediatric specialists. For more information, visit www.ololchildrens.org.

The new freestanding Our Lady of the Lake Children’s Hospital is currently under construction and is set to open in 2019. To learn more about the project, visit www.letsbuildamazing.com.

About Our Lady of the Lake Children’s Health

Our Lady of the Lake Children’s Health is a collaborative, coordinated and child-focused statewide health network that provides patients with more access to physicians and providers specifically trained to care for children. The network includes hospital-based services at the main campus of Our Lady of the Lake Children's Hospital in Baton Rouge, as well as St. Francis Pediatrics in Monroe and Our Lady of Lourdes Women's and Children's in Lafayette. It also connects pediatricians, pediatric specialists and other health providers across our state with clinics in the Baton Rouge region, Hammond, Lafayette and Monroe. This model of coordinated pediatric healthcare extends the vital work happening at Our Lady of the Lake Children’s Hospital into more communities across Louisiana so families have greater access to expertise close to home.

About the Franciscan Missionaries of Our Lady Health System

The Franciscan Missionaries of Our Lady Health System is one of the largest healthcare systems based in Louisiana and is the leading healthcare provider for more than half the state’s population. The health system is a non-profit, Catholic organization sponsored by the Franciscan Missionaries of Our Lady. Headquartered in Baton Rouge, Louisiana, the ministry serves patients in Louisiana and Mississippi through a network of hospitals, clinics, physicians, elderly housing and integrated systems. The health system’s unified physician organization is comprised of 900 adult and pediatric primary care physicians and specialists. The system’s nine hospitals include St. Francis Medical Center in Monroe, Our Lady of the Lake Regional Medical Center in Baton Rouge and Gonzales, Our Lady of the Lake Children’s Hospital in Baton Rouge, Our Lady of Lourdes Regional Medical Center, Heart Hospital, and Women's & Children's in Lafayette, Our Lady of the Angels in Bogalusa, and St. Dominic Hospital in Jackson, Mississippi. For more information, visit www.fmolhs.org.

About Our Lady of the Lake Physician Group

With more than 450 healthcare providers throughout more than 70 locations, Our Lady of the Lake Physician Group is one of the area’s largest physician networks. In addition to primary care, this experienced group of doctors specializes in diagnosis and treatment of a broad range of illnesses and complex medical problems.

About St. Elizabeth Physicians

St. Elizabeth Physicians is the largest provider of primary and specialty care in Ascension Parish, employing over 50 primary care physicians, specialists and providers. St. Elizabeth Physicians has been recognized for quality by the Louisiana Quality Foundation, and as the Large Business of the Year twice by the Ascension Chamber of Commerce. For more information, visit the St. Elizabeth Hospital website.

About St. Francis Medical Center

St. Francis Medical Center is a not-for-profit 316-bed medical center in Monroe, Louisiana with more than 1,800 team members committed to caring for those we serve. With an acute-care hospital, freestanding outpatient center, 19 outpatient clinics, and nearly 350 physician partners, St. Francis Medical Center provides comprehensive healthcare services for a variety of medical and surgical specialties. St. Francis offers Northeast Louisiana’s only Level III NICU, Level III OB, and Level II PICU services. St. Francis Medical Center leads the region in heart and vascular services, critical care, and complex and minimally invasive surgical procedures. The hospital offers an Accredited Chest Pain Center and Centers of Excellence in the areas of obstetrics, bariatric surgery, minimally invasive gynecology, and breast health.

About St. Francis Medical Group

With over 50 healthcare providers at 16 clinic locations, St. Francis Medical Group is one of the area’s largest physician networks and is backed by the resources of St. Francis Medical Center. In addition to primary care, this experienced group of providers specializes in diagnosis and treatment of a broad range of illnesses and complex medical problems. For more information visit the St. Francis Medical Center website.