Notice of Data Security Event

March 3, 2025

Hillcrest Convalescent Center (“Hillcrest”) is notifying individuals of a data security event that may have affected their personal information. While we are unaware of any attempted or actual misuse of personal information, we are providing individuals with information about the event, our response, and steps they may take to protect against any possible misuse of their personal information, should they feel it necessary to do so.

Hillcrest is posting this substitute notice to provide individuals with information about the data security event and to share resources with people who believe their personal information was potentially impacted. Hillcrest mailed letters to affected individuals for whom it had sufficient address information for on March 2, 2025. Please note, we may not have sufficient address information for all potentially impacted individuals and are offering this substitute notice as a means of helping inform them.

What Happened?

On June 27, 2024, Hillcrest identified suspicious activity on its network and moved quickly to secure its environment. Hillcrest immediately launched an investigation with the assistance of third-party cybersecurity experts to determine the nature and scope of the incident. Through the investigation, Hillcrest discovered unauthorized access to its network that led to the unauthorized acquisition of some Hillcrest data. Hillcrest then conducted an extensive and detailed review of the data to identify the potentially affected individuals and information. This review was completed on February 13, 2025.

What Information was Involved?

The potentially affected information includes name, date of birth, Social Security number, patient data, medical information, treatment information, health insurance information, and Health Care Provider information.

What We Are Doing.

Protecting personal information in our care is one of our top priorities. Upon learning of this event, we promptly initiated an investigation to review and enhance our security systems. We also reported the incident to law enforcement in an effort to hold the perpetrators accountable.

Additionally, Hillcrest is offering all affected individuals between twelve (12) and twenty-four months of complimentary credit monitoring and identity restoration services through TransUnion, depending on your state of residence. The deadline to enroll in these services is June 5, 2025. Please note, affected individuals must visit the website or call and speak with a TransUnion representative to be enrolled in the services.

What You Can Do.

Please review the following “What Steps Can I Take to Help Protect My Personal Information?” which provides information on what individuals can do to better safeguard against possible misuse of their personal information. We also encourage all to remain vigilant against incidents of identity theft and fraud by reviewing account statements and monitoring credit reports for suspicious activity. If individuals identify any suspicious activity on their accounts, please contact the institution the account is held with to speak with them directly about the activity.

For More Information.

If anyone has additional questions or concerns that are not addressed in this notice, please call our toll-free dedicated assistance line at 1-833-799-4042. This toll-free line is available from 8:00 am to 8:00 pm Eastern.

We sincerely regret any inconvenience this event may cause. We remain committed to ensuring the security of information in our care.

What Steps Can I Take to Help Protect My Personal Information?

Monitor your accounts:

We encourage you to remain vigilant against incidents of identity theft and fraud by reviewing your account statements and monitoring your free credit reports for suspicious activity or errors. Please report any suspicious activity on your account to the institution.

Check credit reports:

Under United States law, you are entitled to one free credit report annually from each of the three major credit reporting bureaus. To order your free credit report, visit annualcreditreport.com or call, toll-free, 1-877-322-8228. You may also contact the three major credit bureaus directly to request a free copy of your credit report at:

TransUnion
P.O. Box 1000
Chester, PA 19016
1-800-888-4213
transunion.com

Place a security freeze:

You may place a security freeze on your credit reports, free of charge. A security freeze prohibits a credit reporting agency from releasing any information from a consumer’s credit report without written authorization. However, please be aware that placing a security freeze on your credit report may delay, interfere with, or prevent the timely approval of any requests you make for new loans, credit mortgages, employment, housing, or other services. You will need to place a security freeze separately with each of the three major credit bureaus if you wish to place a freeze on all your credit files. To request a security freeze, you will need to supply your full name, address, date of birth, Social Security number, current address, all addresses for up to five previous years, email address, a copy of your state identification card or driver’s license, and a copy of a utility bill, bank or insurance statement, or other statement proving residence. To find out more on how to place a security freeze, contact the credit reporting agencies at:

TransUnion
P.O. Box 2000
Chester, PA 19016
1-888-909-8872
transunion.com/credit-freeze

Place a fraud alert:

At no charge, you can also have the three major credit bureaus place a “fraud alert” on your file that alerts creditors to take additional steps to verify your identity prior to granting credit in your name. Note, however, that because it tells creditors to follow certain procedures to protect you, it may also delay your ability to obtain credit while the agency verifies your identity. As soon as one credit bureau confirms your fraud alert, the others are notified to place fraud alerts on your file. Should you wish to place a fraud alert, or should you have any questions regarding your credit report, please contact the credit reporting agencies.

TransUnion
P.O. Box 2000
Chester, PA 19016
1-888-909-8872
transunion.com/fraud-victim-resource/place-fraud-alert

Review additional resources:

You can further educate yourself regarding identity theft, security freezes, fraud alerts, and the steps you can take to protect yourself against identity theft and fraud by contacting the Federal Trade Commission or your state Attorney General, some contact information is shown below. The Federal Trade Commission encourages those who discover that their information has been misused to file a complaint with them. Instances of known or suspected identity theft should be promptly reported to law enforcement, the Federal Trade Commission, and your state Attorney General. You have the right to file a police report if you ever experience identity theft or fraud. This notification was not delayed by law enforcement.

New York Attorney General
Bureau of Internet and Technology Resources
28 Liberty Street
New York, NY 10005
1-212-416-8433
ag.ny.gov

Washington, D.C. Attorney General
441 4th Street, NW
Washington, DC 20001
1-202-727-3400
oag.dc.gov

You also have certain rights under the Fair Credit Reporting Act (FCRA):

These rights include to know what is in your file; to dispute incomplete or inaccurate information; to have consumer reporting agencies correct or delete inaccurate, incomplete, or unverifiable information; as well as other rights. For more information about the FCRA and your rights pursuant to the FCRA, please visit https://www.consumer.ftc.gov/sites/default/files/articles/pdf/pdf-0096-fair-credit-reporting-act.pdf

Minor’s Personal Information Involved:

You can request that each of the three national credit reporting agencies perform a manual search for a minor’s Social Security number to determine if there is an associated credit report. Copies of identifying information for the minor and parent/guardian may be required, including birth or adoption certificate, Social Security card and government issued identification card. If a credit report exists, you should request a copy of the report and immediately report any fraudulent accounts to the credit reporting agency. You can also report any misuse of a minor’s information to the FTC at https://www.identitytheft.gov/. For more information about Child Identity Theft and instructions for requesting a manual Social Security number search, visit the FTC website: https://www.consumer.ftc.gov/articles/0040-child-identity-theft. Contact information for the three national credit reporting agencies may be found above.

Deceased Family Member’s Personal Information Involved:

You may choose to notify the three major credit bureaus, Equifax, Experian and TransUnion, and request they flag the deceased credit file. This will prevent the credit file information from being used to open credit. To make this request, mail a copy of your family member’s death certificate to each company at the addresses below:

TransUnion Information Services
P.O. Box 2000
Chester, PA 19022