Notice Following Data Security Incident

Tycon Medical Systems, Inc. (Tycon), Norfolk, Virginia, experienced a data security incident that involved personal and / or protected health information belonging to certain current and former patients and has provided notice of this incident to impacted individuals.

On October 15, 2024, Tycon became aware of unusual activity that disrupted access to certain systems. Upon discovery, Tycon took steps to secure its network and engaged a leading, independent digital forensics and incident response firm to investigate what happened and whether any sensitive data may have been impacted. The investigation subsequently revealed certain personal / protected health information was accessed and acquired without authorization by an unknown actor on or about October 17, 2024. Tycon undertook a comprehensive review of the impacted data to identify the individuals and information involved, which concluded on December 20, 2024. Tycon then took steps to provide notification as quickly as possible.

The potentially impacted information may have included names, addresses, dates of birth, Social Security numbers, medical information, and health insurance information. Please note that not all data elements were affected for all individuals.

As soon as the incident was discovered, Tycon took the steps referenced above. Tycon notified the Federal Bureau of Investigation and will provide whatever cooperation is necessary to hold the perpetrators accountable. Tycon also notified the U.S. Health and Human Services Office for Civil Rights and consumer reporting agencies of this incident. Tycon is also taking additional steps to prevent a similar event from occurring in the future.

Tycon is not aware of any evidence of actual misuse of any of the information potentially involved in this incident. However, on December 30, 2024, Tycon mailed notice of this incident to potentially impacted individuals for which Tycon had identifiable address information. The notice provided information about the incident and resources that potentially impacted individuals could utilize to protect their information including the opportunity to enroll in complimentary identity protection services through IDX.

Tycon has established a toll-free call center to answer questions about the incident. The call center is available Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time (excluding major U.S. holidays) and can be reached at 1-877-719-7478. All affected individuals may qualify for complimentary identity protection services through IDX. Individuals who have not received a notification letter must obtain verification of eligibility through the call center to enroll in services.

01/15/25 18455b