Notice of Data Security Incident

Notice of Data Security Incident At Parkhurst Chiropractic, protecting the privacy and security of our patients' information is very important to us. We are writing to notify you of a data security incident involving some of your protected health information. What Happened: On May 15, 2026, we learned that a patient identified a document containing patient information through an internet search and notified our office. We immediately began an investigation with the assistance of our information technology professionals. Our investigation determined that the document was an insurance report generated on November 9, 2022, containing billing-related information associated with services provided during 2021 and 2022. The report had been stored on a network server maintained by a former hosting provider. A copy of the report was identified on a publicly accessible website. Although we believe the report may have become publicly accessible during our transition from a server-based electronic health record system to a cloud-based electronic health record system in the spring of 2023, the exact method of disclosure could not be determined. We immediately requested removal of the report, and it was removed within 24 hours. Our information technology professionals also conducted a comprehensive search for any additional publicly available information and identified no other disclosures. Following completion of our investigation on June 18, 2026, we determined that the information of the individuals receiving this notification was among the information contained in the report, which is why you are receiving this notification. What Information Was Involved: The report contained the following information, but did not include your Social Security numbers, driver's license numbers, financial account information, or payment card information:: NameDate of birthDates of serviceCPT (procedure) codes associated with services received What You Can Do: At this time, we are not aware of any evidence that your information has been misused as a result of this incident. Because the information involved relates to services provided during 2021 and 2022 and did not include Social Security numbers or financial information, the risk of identity theft appears to be low. As a precaution, we encourage you to review any Explanation of Benefits (EOB) statements or other communications from your health insurer. If you identify services you did not receive or other suspicious healthcare activity, please contact your health insurance carrier. What We Are Doing: Upon discovering this incident, we immediately took steps to mitigate any potential harm. We requested removal of the report from the website where it had been identified, and it was removed within 24 hours. We performed an updated HIPAA Security Rule Risk Analysis, conducted an extensive internet search for any additional publicly available information, and worked with our former hosting provider and information technology professionals to investigate the incident. Although the exact method of disclosure could not be determined, both technology providers confirmed that their systems met current security requirements. We have also reviewed and strengthened our administrative and technical safeguards to further protect patient information. We sincerely regret any concern this incident may cause. Protecting the privacy and security of our patients' information remains one of our highest priorities. Should you have any further questions or require any additional information, please do not hesitate to contact us at: Tracy Axley Parkhurst Chiropractic 364 Garden Ave. Holland, MI 49424 Email: tracy@parkhurstchiropractic.com Yours in Good Health, Karla Parkhurst DC, Privacy Officer Parkhurst Chiropractic July 20 2026 LPET0558577