Paths for Families, f/k/a Adoptions Together, Inc. (“Paths for Families”) is giving notice about a recent security incident that may have involved some clients’ personal information.
On or about May 22, 2023, one of our organization’s email accounts started showing signs of unusual activity. Upon discovery, we immediately investigated and aggressively responded to this incident. We promptly changed passwords and otherwise blocked the unauthorized access. Outside technical experts were engaged to further investigate, mitigate, and evaluate our systems. Fortunately, we were able to restore normal operations promptly, and our business operations were unaffected by this event. Paths for Families’ IT team has continued to work closely with the cyber experts to remediate this event and to further harden Paths for Families’ defenses.
While we initially did not believe that any files were impacted and issued communications reflecting that, through our subsequent investigation, we recently learned that an unauthorized third party had the means to potentially copy emails and attachments from the impacted email account. Based on those findings, we took the precaution of reviewing the files in the email account (which involved hand reviewing individual documents) in order to identify any sensitive information.
From this review, it appears at this time that some of the impacted files may have contained the personal information of certain clients and other individuals associated with Paths for Families. The information affected varies by individual and in some cases included name, address, date of birth, demographic and/or health-related information. For some individuals, the personal information involved included a Social Security number, and these individuals are being provided complimentary credit monitoring and identity theft protection services as required by law.
In an abundance of caution, we are notifying clients who were potentially affected of this incident by first class U.S. mail at their last known address, or at the last known address of their parent or legal guardian. Persons potentially affected are encouraged to remain vigilant and monitor financial account statements and credit reports carefully and report any discrepancies to law enforcement. Additional guidance that patients can take to protect themselves can be read on the Federal Trade Commission website.
For more information about this incident, please call 833-256-3158 toll-free Monday through Friday from 8 AM – 8 PM Central (excluding major U.S. holidays). We are fully committed to protecting personal information and sincerely apologize for any concern this incident may have caused.