Notice of Data Security Incident
Berry, Dunn, McNeil & Parker, LLC (“BerryDunn”) is notifying impacted individuals about a recent data security incident experienced by a vendor of BerryDunn’s Health Analytics Practice Group (“HAPG”) that may have impacted their personal information. HAPG receives personal information from its clients to provide data analytics services. Your data may have been impacted if you received services through the state of West Virginia Medicaid, CHIP or Child Welfare programs. We respect the privacy and security of information within our control, and sincerely apologize for any concern or inconvenience this may cause.

What happened: 
On September 14, 2023, BerryDunn was notified that one of its vendors, Reliable Networks of Maine, LLC (“Reliable”), a managed service provider of HAPG, had discovered suspicious network activity that was impacting its network, including systems it managed on behalf of HAPG. BerryDunn immediately implemented its incident response protocols, and engaged cybersecurity experts to assist with determining what occurred and whether any data was compromised. The investigation found that an unauthorized actor gained access to Reliable’s network and took some data stored on the HAPG systems. BerryDunn has engaged a vendor to conduct an in-depth review of the impacted data to determine what personal information may have been impacted and identify any individuals for whom the personal information belongs. This review is still on-going, but BerryDunn is providing notice to potentially impacted individuals out of an abundance of caution. 

BerryDunn has taken steps to secure the HAPG data, such as decommissioning all BerryDunn systems under Reliable’s control and migrating all HAPG data to secure internal BerryDunn systems that are continually monitored as part of our cybersecurity program.  

Impacted individuals should remain vigilant for incidents of identity theft or fraud by reviewing bank accounts and other financial statements, as well as credit reports, for suspicious activity. Incidents of suspected identity theft should be reported to law enforcement or the attorney general. 

For more Information
Beginning November 22, please call 1-888-817-7503 Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time with any questions. We take very seriously the need to protect the privacy and security of all information in our respective care, and deeply regret any inconvenience or concern that this matter may cause.