NOTICE OF DATA SECURITY INCIDENT

North Texas Medical Specialists (“NTMS”) is notifying patients of an incident involving a former employee that may

have impacted personal information.

Unbeknownst to NTMS at the time, a former employee may have accessed and copied certain medical records between

April 1 – 9, 2024, before voluntarily leaving employment with NTMS. NTMS did not become aware of the

unauthorized activity until on or about August 30, 2024. After identifying the unauthorized activity, NTMS promptly

took steps to investigate the incident and determine what data may have been impacted. NTMS has also filed reports

with local law enforcement.

The information affected varies by individual and in some cases included name, address, date of birth, demographic

and/or health-related information, and other information commonly found in medical / billing records. For some

individuals, the personal information involved included a Social Security number, and these individuals are being

provided complimentary credit monitoring and identity theft protection services as required by law.

Though NTMS does not have any evidence that impacted records have been misused, NTMS encourages patients to

remain vigilant against incidents of identity theft and fraud, review their account statements, monitor their credit reports,

and report any suspicious activity to the proper authorities.

For more information, please email PatientInquiry@NTXMed.com or call 1-800-298-2295. NTMS is continuing to take

steps to enhance its security measures to help prevent something like this from happening in the future. Interested

individuals can also review the Steps You Can Take below for further guidance.

STEPS YOU CAN TAKE

➢ FREEZE YOUR CREDIT FILE. You have a right to place a ‘security freeze’ on your credit report, which will prohibit a

consumer reporting agency from releasing information in your credit report without your express authorization. A security freeze is

designed to prevent credit, loans, and services from being approved in your name without your consent. However, using a freeze to take

control over who gets access to the personal/financial information in your credit report may delay, interfere with, or prohibit the timely

approval of any subsequent request or application made regarding a new loan, credit, mortgage, or any other account involving extension

of credit. Security freeze generally does not apply to existing account relationships and when a copy of your report is requested by

existing creditor or its agents or affiliates for certain types of account review, collection, fraud control or similar activities. There is no

charge to place or lift a freeze. To place a security freeze on your credit report, contact each of the following credit bureaus and clearly

explain in the call/letter that you are requesting a security freeze:

o Equifax, PO Box 740241, Atlanta, GA 30374, www.equifax.com, 1-800-685-1111

o Experian, PO Box 2002, Allen, TX 75013, www.experian.com, 1-888-397-3742

o TransUnion, PO Box 2000, Chester, PA 19016, www.transunion.com, 1-800-916-8800

To request a security freeze, provide your full name (middle initial, Jr., Sr., II, III, etc.), Social Security Number, date of birth; home

addresses over the past 5 years; proof of current address such as a current utility bill or telephone bill; photocopy of government issued

identification card (driver’s license or ID card, military ID, etc.); and if you are a victim of identity theft, include a copy of either the

police report, investigative report, or complaint to a law enforcement agency concerning identity theft. If you request a security freeze

via toll-free telephone or other secure electronic means, credit reporting agencies have 1 business day after receiving the request to place

the freeze. In the case of a request made by mail, the agencies have 3 business days after receiving your request to place a security

freeze on your credit report. Credit agencies must also send written confirmation within 5 business days and provide a unique personal

identification number (PIN) or password, or both that can be used to authorize the removal or lifting of the security freeze. To lift the

freeze to allow a specific entity or individual access to your credit report, you must call or send a written request to the credit reporting

agencies by mail and include proper identification (name, address, and social security number) and PIN or password provided when you

placed the security freeze as well as the identities of those entities or individuals you would like to receive your credit report or the

specific period of time you want the credit report available. The credit reporting agencies have 3 business days after receiving a request

to lift freeze for those identified entities or for the specified period of time. To remove the freeze, you must send a written request to the

3 credit bureaus by mail and include proper identification (name, address, & social security number) and PIN number or password

provided when you placed the freeze. The credit bureaus have 3 business days after receiving the request to remove the freeze.

➢ PLACE FRAUD ALERTS ON YOUR CREDIT FILE. As an alternative to a security freeze, you have the right to place an

initial or extended fraud alert on your credit file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer’s credit

file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity

before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert, which is an alert lasting 7

years. Contact the 3 credit reporting agencies listed above to activate an alert.

➢ ORDER YOUR FREE ANNUAL CREDIT REPORTS. Visit www.annualcreditreport.com or call 877-322-8228 to obtain 1

free copy of your credit report annually. Periodically review a copy of your credit report for discrepancies and identify accounts you did

not open or inquiries you did not authorize.

➢ FAIR CREDIT REPORTING ACT (FCRA): Summary of Your Rights Under the Fair Credit Reporting Act: The federal

Fair Credit Reporting Act (FCRA) promotes the accuracy, fairness, and privacy of information in the files of consumer reporting

agencies. There are many types of consumer reporting agencies, including credit bureaus and specialty agencies (such as agencies that

sell information about check writing histories, medical records, and rental history records). Your major rights under the FCRA are

summarized below. For more information, including information about additional rights, go to www.consumerfinance.gov/learnmore or

write to: Consumer Financial Protection Bureau, 1700 G Street N.W., Washington, DC 20552. 1) You must be told if information in

your file has been used against you. 2) You have the right to know what is in your file. 3) You have the right to ask for a credit score. 4)

You have the right to dispute incomplete or inaccurate information. 5) Consumer reporting agencies must correct or delete inaccurate,

incomplete, or unverifiable information. 6) Consumer reporting agencies may not report outdated negative information. 7) Access to

your file is limited. 8) You must give your consent for reports to be provided to employers. 9) You may limit “prescreened” offers of

credit and insurance you get based on information in your credit report. 10) You have a right to place a “security freeze” on your credit

report, which will prohibit a consumer reporting agency from releasing information in your credit report without your express

authorization. 11) You may seek damages from violators. 12) Identity theft victims and active duty military personnel have additional

rights.