Notice of Data Security Incident

May 29, 2024
medQ, Inc. (“medQ”) provides administrative services for Comprehensive Diagnostic Imaging of OneCore Health (“CDI”) and is issuing notice regarding a data security event that may have exposed personal and health information of certain CDI patients. We are not aware of any attempt to misuse personal or protected health information of CDI patients as a result of this incident. This notice explains the incident, measures medQ has taken, and some additional steps potentially affected patients may consider taking in response.

What Happened?
On December 26, 2023, medQ experienced a cybersecurity incident, and as a result, certain files located on servers used by medQ’s software platform (the “medQ Platform”) were impacted. As soon as medQ became aware of the incident, medQ promptly disconnected the network in the medQ Platform and engaged a cybersecurity firm to conduct a forensic investigation.

The investigation revealed that some files were copied by an unauthorized third party from the medQ Platform between December 20, 2023, and December 26, 2023.

What Information Was Involved?
The information involved in this incident may have included name, Social Security number, driver’s license number, date of birth, health information, financial information, subscriber ID number, diagnoses, lab results, medication, other treatment information, provider names, and dates of treatment.
What medQ is Doing medQ takes customer privacy and security of information in its care very seriously. To help prevent something like this from happening again, medQ has implemented and will continue to adopt additional safeguards and technical security measures to further protect and monitor its systems.

While medQ is not aware of any misuse of personal information, medQ has provided notice of this event to individuals whose personal information may have been involved. This notice includes instructions on how to activate complimentary identity monitoring services from Equifax. 

What Individuals Can Do
MedQ has established a toll-free call center to answer questions about the incident and to address related concerns. Individuals may call 888-322-6373 Monday through Friday between 8 am and 8 pm CST (excluding major U.S. holidays.) The privacy and protection of personal information is a top priority medQ, and we deeply regret any inconvenience this incident may cause.

Skip to content