ALLENTOWN, Pa., Oct. 6, 2026 /PRNewswire/ -- Secure Healthcare Information Management, LLC ("SHIM") recently notified potentially impacted individuals of a data security incident that may have involved their personal and/or protected health information. SHIM is a billing and medical management company for independent physicians and medical institutions in the Northeastern part of Pennsylvania.

On July 17, 2026, SHIM experienced a network disruption and immediately initiated an investigation of the matter with the assistance of cybersecurity experts. The investigation revealed certain personal information was accessed or acquired without authorization by an unknown actor at some point between July 6, 2026 to July 16, 2026. SHIM then undertook a comprehensive review of those files to determine whether it included personal information. On September 18, 2026, SHIM confirmed the scope of the impact and secured information sufficient to effectuate notice.

The potentially impacted information may have included names, dates of birth, Social Security numbers, driver's license or state identification numbers, medical information, and health insurance information.

As soon as the incident was discovered, SHIM took the steps referenced above. SHIM also reported the incident to the U.S. Health and Human Services Office for Civil Rights and consumer reporting agencies. SHIM also implemented several measures to reduce the risk of similar future incidents.

On October 6, 2026, SHIM mailed notice of this incident to potentially impacted individuals for which SHIM had identifiable address information. The notice provided information about the incident and resources that potentially impacted individuals could utilize to protect their information. For eligible individuals, this also included the opportunity to enroll in complimentary identity protection services through Cyberscout, a TransUnion company specializing in fraud assistance and remediation services. 

SHIM has established a toll-free call center to answer questions about the incident. The call center is available Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern Time (excluding major U.S. holidays) and can be reached at 1-833-516-7420. All affected individuals may qualify for complimentary identity protection services through Cyberscout. Individuals who have not received a notification letter must obtain verification of eligibility though the call center to enroll in services. The deadline to enroll in services is January 4, 2027. 

View original content:https://www.prnewswire.com/news-releases/secure-healthcare-information-management-llc-provides-notice-following-data-security-incident-302900335.html

SOURCE Secure Healthcare Information Management, LLC