Notice of Data Security Incident

April 2, 2024

City of Hope is committed to providing the highest standard of patient care, as well as protecting the privacy and confidentiality of personal information.  This notice concerns an incident involving unauthorized third party access to some of City of Hope’s systems and copying of files, including some that may have contained personal information.  While there is no indication of any identity theft or fraud occurring as a result of this incident, we want to let you know what happened, and the steps that we have taken in response.  

What Happened?

On or about October 13, 2023, City of Hope became aware of suspicious activity on a subset of its systems and immediately instituted mitigation measures to minimize any disruption to its operations.  City of Hope launched an investigation into the nature and scope of the incident with the assistance of a leading cybersecurity firm, which determined that an unauthorized third party accessed a subset of our systems and obtained copies of some files between September 19, 2023 and October 12, 2023.  City of Hope has undertaken a detailed review of the files to determine the incident’s impact and has determined that some of these files may have contained personal information.

What Information Is Involved?

While the investigation remains ongoing, the impacted personal information identified thus far varies by individual but may have included name, contact information (e.g., email address, phone number), date of birth, social security number, driver’s license or other government identification, financial details (e.g., bank account number and/or credit card details), health insurance information, medical records and information about medical history and/or associated conditions, and/or unique identifiers to associate individuals with City of Hope (e.g., medical record number).

What We Are Doing

Upon discovery of this incident, City of Hope immediately instituted mitigation measures.  We then promptly implemented additional and enhanced safeguards and enlisted the support of a leading cybersecurity firm to enhance the security of our network, systems, and data. We also launched a comprehensive investigation, identified individuals affected, reported the incident to law enforcement, and notified regulatory bodies.  

City of Hope is providing identity monitoring services for two years, at no cost, to individuals whose information may have been involved. 

What You Can Do

We encourage you to remain vigilant to protect against potential fraud and identity theft by reviewing your account statements, monitoring your credit reports, and notifying your financial institutions of any potential suspicious activity. 

For More Information

Individuals can arrange for credit monitoring by following the instructions on the notification letters they receive.

City of Hope greatly values our relationship and the trust you place in us and are deeply sorry for any concern this incident may cause. If you have questions, please call the dedicated call center at 1-866-495-8913, Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time, excluding major U.S. holidays.