Data Breach Notifications

Entity Information

  • Type of Organization: Healthcare
  • Entity Name: Grand River Medical Group, P.C.
  • Street Address: 1515 Delhi Street, Suite 100
  • City: Dubuque
  • State, or Country if outside the US: IA
  • Zip Code: 52001

Submitted By

  • Name: Todd Kinney
  • Title: Mr.
  • Firm name (if different than entity): Kutak Rock, LLP
  • Telephone Number: 402-880-4447
  • Email Address: todd.kinney@kutakrock.com
  • Relationship to entity whose information was compromised: Legal Representaion

Breach Information

  • Total number of persons affected (including residents): 37858
  • Total number of Maine residents affected: 2
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: Yes
  • Date(s) Breach Occured: 10/19/2020-10/22/2020
  • Date Breach Discovered: On October 22, 2020, the incident was discovered, however, it was not until December 15, 2020, that the forensic firm investigating issued a preliminary report indicating possible compromise.
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with:

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 02/08/2021-02/11/2021
  • Copy of notice to affected Maine residents: Maine Sample Notice Letter.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: IDX identity protection services include: 12 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed id theft recovery services.