On February 12, 2022, Cytometry Specialists, Inc. (“CSI Laboratories”) discovered an unauthorized party may have gained access to certain customers’ benefits information, including Social Security numbers. On March 25, 2022, Cytometry Specialists, Inc began sending out data breach notification letters to those affected by the security breach.
If you received a data breach notification, it is essential you understand what is at risk and what you can do about it. More about what you can do if your data was stolen is available in our prior blog post, "A Guide For Victims of a Data Breach”.
We have obtained a copy of the initial data breach letter issued by Cytometry Specialists, Inc. d/b/a CSI Laboratories:
Dear <> <>,
What Happened
We are writing to inform you of an incident that may have affected your personal information.
As you may be aware, on February 12, 2022, we first learned of a cyberattack that partially disrupted CSI’s information systems. Upon learning of the incident, we immediately took steps to isolate and secure our systems and investigate the
incident. We retained a third-party forensics firm to secure our systems, remediate any risks, and methodically bring our systems back online. As part of the investigation, on February 25, 2022, we determined that an unauthorized malicious actor acquired certain files from our systems, including documents that may have contained some of your
personal information. Since then, we have been analyzing impacted files to understand what personal information may be at risk, and working to provide notice to individuals and authorities, as applicable.
What Information Was Involved
The type of information included your name, address, date of birth, Social Security number, insurance, and other benefits information.
What We Are Doing
Upon learning of the incident, we engaged a well-known forensic investigation firm to identify the scope of the incident and to assist us with securing our systems and data. We have carefully brought our systems back online and we continue to closely monitor our network and information systems for unusual activity. We will continue to further improve security across our company networks and protect from unauthorized access or similar criminal activity in the future.
In addition, we are offering identity theft protection services through IDX, the data breach and recovery services expert. IDX identity protection services include: 24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed id theft recovery services. With this protection, IDX will help you resolve
issues if your identity is compromised.
What You Can Do
We encourage you to contact IDX with any questions and to enroll in the free identity protection services by calling 1-833-774-1232 or going to https://app.idx.us/account-creation/protect and using the Enrollment Code provided above.
IDX representatives are available Monday through Friday from 9 am - 9 pm Eastern Time. Please note the deadline to enroll is June 24, 2022.
At this time, we have not received any reports that personal information has been subject to fraudulent activity. However, we encourage you to take full advantage of this service offering. IDX representatives have been fully versed on the incident and can answer questions or concerns you may have regarding protection of your personal information.
For More Information
You will find detailed instructions for enrollment on the enclosed Additional Important Information document. Also, you will need to reference the enrollment code at the top of this letter when calling or enrolling online, so please do not discard this letter.
Please call 1-833-774-1232 or go to https://app.idx.us/account-creation/protect for assistance or for any additional questions you may have.
