A Notice to Our Patients

March 28, 2025

Frederick Health is committed to protecting the privacy and security of the information in our care. Regrettably, this notice concerns a recent security incident involving some of that information.

On January 27, 2025, we experienced a ransomware event affecting our IT systems. We immediately initiated our incident response protocols, which involved taking steps to secure our systems and notifying law enforcement. We also began an investigation with assistance from a third-party forensic firm. The investigation determined that an unauthorized person gained access to our network and, on January 27, 2025, copied certain files from a file share server.

The documents involved varied by individual but may have contained patient names, addresses, dates of birth, Social Security numbers, drivers’ license numbers, medical record numbers, health insurance information, and/or clinical information related to patients’ care, not contained in our Electronic Medical Record.

We are mailing letters to individuals whose information may have been involved and for whom we have sufficient contact information. The letters include details on the complimentary offer of credit monitoring and identity theft protection services we are making available to individuals through IDX. Please visit https://response.idx.us/FrederickHealth for instructions on how to enroll in the IDX services using the unique Enrollment Code provided at the top of the letter. We have also established a dedicated, toll-free call center to answer questions individuals may have about the incident. If you have questions, please call 1-877-780-7840, available Monday through Friday, from 9:00 a.m. to 9:00 p.m. Eastern Time.

We take this incident very seriously and deeply regret any inconvenience or concern this incident may have caused. To help prevent a similar incident from occurring in the future, we have implemented, and will continue to adopt, additional safeguards to further protect and monitor our systems.