Notice of Security Incident by a Third-Party Vendor
UCM Medical Group Sub, LLC (d/b/a UChicago Medicine Medical Group, formerly Primary Healthcare Associates, S.C.) is committed to protecting the confidentiality and security of personal information. This notice is being posted because a third-party vendor, Nationwide Recovery Services, Inc. (“NRS”), notified us on April 8, 2025, that they experienced a cybersecurity incident in July 2024 that may have resulted in unauthorized access to certain personal information. At this time, the vendor has informed us that they are not aware of any misuse of the personal information potentially affected by this incident.
Was I affected by this incident?
We are providing separate written notification to affected individuals for whom we have mailing addresses. We are posting this notice for those affected individuals for whom we do not have mailing addresses. Ordinarily, if you were a patient, we have your last known address.
What happened?
From July 5, 2024, to July 11, 2024, an unauthorized individual gained access to NRS systems and obtained information from certain files and folders. Upon learning of this, NRS took steps to terminate the unauthorized access and make enhancements to further secure their systems. NRS recently completed a review and analysis of the potential impacts and determined that personal information may have been involved.
What information was involved?
NRS has indicated that the affected information may have contained the following types of personal information: first and last name, address, date of birth, Social Security number, financial account information, and/or medical-related information that may have been provided to them to perform financial services on our behalf.
What We Are Doing?
We have terminated our relationship with Nationwide Recovery Services, Inc. NRS has confirmed they implemented additional security measures to prevent the occurrence of a similar event in the future.
What You Can Do?
We encourage you to remain vigilant for threats of fraud and identity theft by regularly reviewing your account statements and credit reports. We also encourage you to read account statements from your healthcare providers, explanations of benefits from your health plan, and other documents related to medical services to make sure they do not include services you did not receive.
For More Information
If you have any questions or concerns, you may call (866) 408-0722 toll-free from 8 am to 5:30 pm central time, Monday through Friday (excluding major U.S. holidays).
Was I affected by this incident?
We are providing separate written notification to affected individuals for whom we have mailing addresses. We are posting this notice for those affected individuals for whom we do not have mailing addresses. Ordinarily, if you were a patient, we have your last known address.
What happened?
From July 5, 2024, to July 11, 2024, an unauthorized individual gained access to NRS systems and obtained information from certain files and folders. Upon learning of this, NRS took steps to terminate the unauthorized access and make enhancements to further secure their systems. NRS recently completed a review and analysis of the potential impacts and determined that personal information may have been involved.
What information was involved?
NRS has indicated that the affected information may have contained the following types of personal information: first and last name, address, date of birth, Social Security number, financial account information, and/or medical-related information that may have been provided to them to perform financial services on our behalf.
What We Are Doing?
We have terminated our relationship with Nationwide Recovery Services, Inc. NRS has confirmed they implemented additional security measures to prevent the occurrence of a similar event in the future.
What You Can Do?
We encourage you to remain vigilant for threats of fraud and identity theft by regularly reviewing your account statements and credit reports. We also encourage you to read account statements from your healthcare providers, explanations of benefits from your health plan, and other documents related to medical services to make sure they do not include services you did not receive.
For More Information
If you have any questions or concerns, you may call (866) 408-0722 toll-free from 8 am to 5:30 pm central time, Monday through Friday (excluding major U.S. holidays).