skip to main content
Main Site Navigation
Top of main content

Information Security Incident Update: Our Commitment to Transparency

Recently, some security issues have been identified. Learn more below about the swift responses and what is being done to prevent future incidents.

2025

OnePoint Patient Care Data Security Incident

Who is OnePoint Patient Care?

OnePoint Patient Care (“OnePoint”) is a vendor that contracts with organizations offering Hospice care, including Carle Health, to provide prescriptions to those patients.

Who was impacted?

Some Carle Health patients were impacted by this security incident. OnePoint sent notifications letters of those impacted to the patients themselves or to Carle Health. Carle has since forwarded all received letters to the patient or their next of kin/power of attorney representative. If you or your loved one’s information was impacted, you will or have received a letter explaining the incident, steps taken to reduce harm, and any other action necessary for patients to protect themselves and their information.

Were Carle’s patient records or network security impacted by this incident?

No. There was no impact to Carle’s medical records or our electronic environment.

How can I learn more about this incident?

Please visit the following webpage from OnePoint for more information: https://www.oppc.com/data-security-incident/. If you have any questions or concerns, please contact OnePoint’s Call Center at 1-844-218-4461 Monday through Friday from 7:00 am to 7:00 pm Mountain Time, excluding major U.S. Holidays.


Datavant Notice of Network Security Incident

Who is Datavant?

Datavant (formerly known as Ciox) is a vendor that contracts with healthcare organizations, including Carle Health, to perform release of medical records functions.

Who was impacted?

Some Carle Health patients were impacted by this security incident. If your information was impacted, you will or have received a letter directly from Datavant explaining the incident, steps taken to reduce harm, and any other action necessary for patients to protect themselves and their information.

Were Carle’s patient records or network security impacted by this incident?

No. There was no impact to Carle’s medical records or our electronic environment.

How can I learn more about this incident?

Please visit the following webpage from Datavant for more information: https://www.datavant.com/notice-of-security-incident. If you have any questions or concerns, please contact Datavant’s Call Center at (866) 676-8792 Monday through Friday from 8:00 am to 5:30 pm Central Time, excluding major U.S. Holidays.

2024

On February 21, 2024, Change Healthcare experienced a cyber security incident which affected many healthcare organizations throughout the country. Change Healthcare provided services to Carle’s retail pharmacies for benefit coverage determinations and submissions of claims to insurance companies. While Carle successfully transitioned those services to other vendors, we’ve been in active communication with Change Healthcare to understand the nature and extent of their incident.

 

Carle remains committed to working with Change Healthcare once they share whether the incident impacted sensitive information belonging to Carle or our patients. On April 22, 2024, Change Healthcare issued a press release indicating that sensitive information was compromised in the cyberattack; however, no specifics have been communicated to Carle at this time. It may take them several months before the full impact of the incident is known.

 

Change Healthcare is providing support and protections for those that may have been impacted. Given that Carle’s retail pharmacy used Change Healthcare’s services, we recommend patients get more information regarding the support Change Healthcare is offering. Information is available at http://changecybersupport.com/  or by calling the Change Healthcare Customer Service line at 1-866-262-5342.