Sona Dermatology & MedSpa has provided notice to certain North Carolina residents of an incident involving some of their personal information.
Sona Dermatology & MedSpa manages and operates dermatology practices. Last year, we began managing The Dermatology Center of Raleigh, P.A. (“DCR”), a dermatology practice in Raleigh, North Carolina. In June 2017, DCR began winding down its practice and transitioning patients to Sona MedSpa Physician Group, PLLC (the “Sona Practice”), an existing dermatology practice managed by Sona Dermatology & MedSpa.
DCR and the Sona Practice entered into a contract to allow DCR to assist with transitioning and onboarding its patients. On June 21, 2017, the practice administrator of DCR emailed to the Sona Practice a file containing the first and last name, telephone number and an internal patient number for all then-current DCR patients. The email did not contain medical records, home addresses, dates of birth, social security numbers, or any financial account information.
The email was not encrypted while being sent to the Sona Practice. However, it was also never opened. The recipient at the Sona Practice realized immediately that the email was not encrypted, deleted the email, and removed it from the system server. He then ensured that the practice administrator of DCR was notified and all other information transmissions going forward were performed utilizing a fully encrypted method. Sona Dermatology & MedSpa is not aware of any report of identity fraud as a direct result of this incident. Nevertheless, out of an abundance of caution we are making individuals aware of the incident.
Sona Dermatology & MedSpa does not believe there has been any improper use or disclosure of patient information. We take information security and patient privacy very seriously, and have provided notice of this event in an effort to be fully transparent with our patients. We have and will continue to utilize secure methods for transmission of any patient information.
We encourage individuals to take precautions to protect the security of their personal information. We recommend that they remain vigilant to prevent identity theft and fraud by monitoring credit reports and financial institution and other account statements. We also advise that they promptly report any suspicious activity or suspected identity theft.
To Find Out More Information
To learn whether your information may have been affected in this incident, please contact Sona Support Center at DCRinforequest@sonaskin.com.