Health Fitness Corporation - Notice of Data Privacy Event

LINCOLN, Neb., Oct. 3, 2018 /PRNewswire/ -- On August 29, 2018, Department of Administrative Services was notified by Health Fitness Corporation ("HealthFitness"), a former vendor for the State of Nebraska, that certain records relating to health coaching were being stored on a server that was inadvertently searchable on the Internet due to a software misconfiguration.

HealthFitness found evidence that web crawlers accessed these files, at least as early as August of 2015. Most of these files were scanned documents and many contained handwritten information, which is not easily recognizable by web crawlers and search engines.

Upon discovery, HealthFitness immediately removed the files and began an investigation using both internal resources and third-party forensic investigators to identify potentially impacted individuals.  

On September 21, 2018, HealthFitness mailed notice letters to individuals whose information was contained in the files.  HealthFitness has offered potentially impacted individuals access to credit monitoring and identity theft protection services for one year without charge.

HealthFitness encourages potentially impacted individuals to remain vigilant against incidents of identity theft and fraud, to review account statements, and to monitor their credit reports and explanation of benefits forms for suspicious activity. HealthFitness is providing potentially impacted individuals with contact information for the three major credit reporting agencies, as well as providing advice on how to obtain free credit reports and how to place fraud alerts and security freezes on their credit files.  The relevant contact information is below:

Potentially impacted individuals may also find information regarding identity theft, fraud alerts, security freezes and the steps they may take to protect their information by contacting the credit bureaus, the Federal Trade Commission or their state Attorney General. The Federal Trade Commission can be reached at: 600 Pennsylvania Avenue NW, Washington, DC  20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261.

HealthFitness has set up a call center to answer questions from those who may have been impacted by this incident.  The call center can be reached at 855-569-7880 (toll free), Monday through Saturday, 8:00 a.m. to 8:00 p.m. CT.

SOURCE Health Fitness Corporation