South Texas Accelerated Research Therapeutics (START) recently notified individuals of a data breach involving participants in a clinical trial at its Mountain Region location in West Valley City, Utah. The incident was discovered on February 15, 2024, when START’s parent company, South Texas Oncology and Hematology (STOH), detected suspicious activity on its network. An investigation revealed that an unauthorized actor gained access to the network and may have extracted data stored on the affected systems. START completed a review of the compromised data on June 21, 2024, to determine the nature of the impacted information.
The potentially exposed information includes names, dates of birth, and clinical trial health data such as medical conditions or treatment details. Although there is no evidence that this information has been misused, START is informing affected individuals out of caution. The organization emphasized its commitment to data privacy and security, taking proactive steps to protect its systems and prevent similar incidents in the future.
In response to the breach, START has implemented enhanced cybersecurity measures to secure its network and prevent future attacks. The organization is also offering affected individuals complimentary access to credit monitoring and fraud assistance services through Cyberscout, provided by Identity Force, a TransUnion company. These services include alerts for credit changes, fraud support, and remediation resources to assist in addressing potential identity theft concerns.
START encourages individuals to remain vigilant by monitoring financial statements, bank accounts, and credit reports for signs of unauthorized activity. The organization has provided detailed enrollment instructions for the complimentary services and guidance on further protecting personal information. START expressed its regret for any inconvenience caused and reaffirmed its commitment to maintaining the trust of those impacted. For additional support, individuals can contact START directly at the provided email address.
Reference:
