On or about May 7, 2021, HealthReach Community Health Centers (“HealthReach”) was notified that hard drives containing information belonging to certain HealthReach patients were improperly disposed of by an employee at a third-party data storage facility. HealthReach has worked diligently to determine exactly what happened and what information was involved as a result of this incident.

HealthReach Community Health Centers has found no evidence that the hard drives or specific individuals’ information has been accessed or acquired. However, due to the compromise of HealthReach’s data, HealthReach has notified all potentially affected individuals of this incident.

As of this writing, HealthReach has not received any reports of related identity theft since the date of the incident.

HealthReach mailed notification letters to affected individuals on Thursday, September 9, 2021 which included additional information about what occurred, outlined the specific personal information that could have been exposed for that individual, and provided a toll-free number that individuals can call to learn more about the incident. The call center can be reached at (833) 992-4004 and is available Monday through Friday from 9:00 am to 9:00 pm Eastern time.

257625684v.1