Visit Our Coronavirus (COVID-19)  Resource Section ⇒ X

Breach Notification: CHKD victim of email phishing incident

Elizabeth Earley - (757) 668-9049 or Elizabeth.Earley@CHKD.org
2021-08-10

Children’s Hospital of The King’s Daughters is notifying individuals of a breach caused by an email phishing scam that allowed unauthorized access to a small number of employee email accounts that held patient information.

The incident occurred on April 20, 2021. Upon discovery of the incident, CHKD immediately launched an internal investigation and blocked the unauthorized access. The hospital also engaged outside forensic experts to fully investigate the incident. On June 11, 2021, the outside experts determined the full scope of the potential access and began an extensive review of all potentially accessed emails and attachments in order specifically identify individuals whose information may have been impacted. On July 12, 2021, the outside experts provided CHKD with a list of individuals whose personal information was potentially accessed through the compromised email accounts, including some patients of CHKD and their guarantors, certain patients of Sentara Norfolk General Hospital for whom CHKD provided laboratory testing and diagnostic services, and certain student athletes for whom CHKD provides athletic training services.

CHKD is in the process of sending notification letters to the affected individuals for whom it has mailing addresses. The personal information potentially at risk may include any or all of the following: full name, date of birth, patient account number, health insurance number, and/or other health related information. In a few instances, social security numbers were also potentially accessed. CHKD is providing identity theft monitoring to any individual whose social security number was potentially accessed within the email accounts.

CHKD is fully committed to protecting its patients’ and other personal information and is continuing to take steps to enhance its security measures to help prevent something like this from happening in the future.

While CHKD has no evidence that any personal information has been, or will be, misused, it is always a good idea to use precautions with regard to personal information as part of routine practices.

CHKD has set up a toll-free call center to answer questions, which will be available for 90 days starting on August 10, 2021. Individuals who are concerned that their information was involved in this incident may call (800) 750-9063, Monday through Friday from 8 a.m. to 5 p.m. EST, excluding holidays, to verify and obtain additional information regarding whether their information was potentially involved.