Strategic Management Incident

Strategic Management, LLC (“Strategic Management”) provides management services to Memorial Driftwood Nursing Center (“Driftwood”). Strategic Management recently responded to and addressed a data security incident involving one email account on the Strategic Management email system. Strategic Management is mailing notification letters to some Driftwood patients whose information may have been involved in the incident.

According to Strategic Management, on October 4, 2023, Strategic Management learned of suspicious activity in one email account on its email system. In response, Strategic Management advised that it took steps to ensure the security of the email account and its email system. Its investigation determined that the account was accessed without authorization between October 3, 2023 and October 4, 2023. Strategic Management further reports that its investigation was unable to determine whether the unauthorized person actually viewed any emails or attachments in the account. Importantly, Driftwood’s electronic medical record system was not involved in this incident.

Though Strategic Management identified no indication that any specific emails and attachments were actually viewed without authorization, in an abundance of caution, Strategic Management conducted a review of the emails and attachments in the account.

On December 1, 2023, Strategic completed its review, and reported that those emails and attachments contained some information concerning certain Driftwood patients. The information varied per patient but may have included some or all of the following: name, addresses, dates of birth, diagnosis or treatment information, health insurance information, provider name, medical record number, and/or prescription information. For some patients, Social Security numbers or driver’s license numbers may have been involved.

For patients whose information may have been involved, we encourage you to review the statements you receive from your health insurers. If you see services that you did not receive, you should contact the insurer that issued the statement immediately.   

We are committed to the privacy of our patients’ information and sincerely regret any inconvenience or concern this may cause. To help prevent something like this from happening again, Strategic Management advised that it has implemented additional safeguards and technical security measures to further protect and monitor its email system. If you have questions, you may contact the following toll-free 844-643-5218.