Tift Regional Health System, Inc.

• •Launched an investigation, with the assistance of third-party computer forensic specialists
• •Disabled the network proactively as a security response and restored access quickly
• •Notified federal law enforcement regarding the event
• •Undertook a time intensive and thorough review of the documents at risk
• •Providing access to credit monitoring services for , through Experian, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
• •Providing impacted individuals with guidance on how to better protect against identity theft and fraud
• •Providing written notice of this incident to relevant state and federal regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
• •Notified the U.S. Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act (HIPAA)

• •Implement additional safeguards and training to its employees
• •Continue to review our policies, procedures and processes related to the storage and access of personal information to reduce the likelihood of a similar future event

DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).