Notice of Data Security Incident
Berry, Dunn, McNeil & Parker, LLC (“BerryDunn”) is notifying impacted individuals about a recent data security incident experienced by a vendor of BerryDunn’s Health Analytics Practice Group (“HAPG”) that may have impacted their personal information. HAPG receives personal information from its customers to provide data analytics services. We respect the privacy and security of information within our control, and sincerely apologize for any concern or inconvenience this may cause.

What happened: 
On September 14, 2023, BerryDunn was notified that one of its vendors, Reliable Networks of Maine, LLC (“Reliable”), a managed service provider of HAPG, had discovered suspicious network activity that was impacting its network, including systems it managed on behalf of HAPG. BerryDunn immediately implemented its incident response protocols, and engaged cybersecurity experts to assist with determining what occurred and whether any data was compromised.  The investigation found that an unauthorized actor gained access to Reliable’s network and took some data stored on the HAPG systems.  BerryDunn has engaged a vendor to conduct an in-depth review of the impacted data to determine what personal information may have been impacted and identify any individuals for whom the personal information belongs. This review was completed on April 2, 2024. From this review, it appears that some combination of individuals’ names, addresses, dates of birth, Social Security numbers, health insurance policy numbers, Medicare or Medicaid numbers, state or governmental ID numbers, passport numbers, and medical information was contained in the impacted data.

BerryDunn has taken steps to secure the HAPG data, such as decommissioning all BerryDunn systems under Reliable’s control and migrating all HAPG data to secure internal BerryDunn systems that are continually monitored as part of our cybersecurity program.  In addition, we are offering credit monitoring and identity protection services from IDX, a ZeroFox Company, to impacted individuals at no cost.

Impacted individuals should remain vigilant for incidents of identity theft or fraud by reviewing bank accounts and other financial statements, as well as credit reports, for suspicious activity. Incidents of suspected identity theft should be reported to law enforcement or the attorney general. We also encourage individuals to contact IDX with any questions and to take full advantage of the IDX service offering.

For more Information
Please call 1-888-817-7503 Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time with any questions. We take very seriously the need to protect the privacy and security of all information in our respective care, and deeply regret any inconvenience or concern that this matter may cause.