Notice to our Patients of Unauthorized Access to Patient Billing Records

Inova Health System (“Inova”) is committed to protecting the confidentiality and security of our patients’ information. Regrettably, this notice concerns an incident involving some of that information.

On March 21, 2019, law enforcement advised us that some of our patient records may have been accessed by an unauthorized person. We immediately began an investigation and engaged a leading forensic firm to determine what happened and what information may have been accessed. Our investigation determined that the unauthorized person obtained the login credentials of an Inova employee and used those credentials to access our billing system between September and November 2017. During that time, personal information may have been accessed.

We are taking this matter very seriously and are working closely with Homeland Security Investigations (“HSI”) and Fairfax County Police Department. For eligible patients, we are offering one year of credit monitoring and identity protection services at no cost to the patient.

To help prevent something like this from happening in the future, we continue to enhance our security processes, have put in place additional monitoring tools, are retraining employees about password security, have updated our policies regarding password complexity and limitations on transmission of information, and are reviewing our policies and procedures.

Should you have any questions, please call 855-543-5396, from 9 a.m. to 9 p.m. Eastern Time, Monday through Friday.

RELATED INFORMATION: 

Español: Aviso de no discriminación y acceso a los servicios de ayuda con el idioma  
Español: Aviso a nuestros pacientes sobre el acceso no autorizado a sus expedientes de facturación