BakoDx Notifies Individuals of Data Security Incident Involving Personal Information

Bako Diagnostics (“BakoDx”), which provides laboratory services focused on skin, tissue and bone to health care providers, discovered on December 28, 2021 that certain personal information may have been accessed and removed from its computer network as a result of potential unauthorized activity. Upon discovery of this activity, BakoDx immediately took steps to prevent any further unauthorized activity and engaged a national forensic firm to investigate the incident and assist with remediation efforts. Although its investigation is ongoing, BakoDx has determined that an unauthorized third party was able to access certain systems that contained personal information and remove some data between December 21 and 28, 2021.

Not all data elements may have been involved for all individuals. Depending upon the individual, personal information may have included: (1) information to identify and contact patients or guarantors, such as full name, date of birth, address, telephone number, and email address; (2) health insurance information, such as name of insurer, plan and/or group number, and member number; (3) medical information, such as Medical Record Number, dates of service, provider and facility names, and specimen or test information; and (4) billing and claims information, including financial account information.

BakoDx takes the security of personal information very seriously. As soon as it discovered the incident, it promptly launched a forensic investigation, contacted law enforcement, and took steps to remediate the incident and prevent further activity. In response to this incident, BakoDx has enhanced its security and monitoring capabilities as well as hardened its systems as appropriate to minimize the risk of any similar incident in the future.

BakoDx is providing additional information on general steps individuals can take to monitor and protect their personal information in the below Reference Guide. Individuals should carefully review credit reports and statements sent from healthcare providers and financial institutions as well as their insurance company to ensure that all account activity is valid. Any questionable charges should be promptly reported to the company which maintains the account. For individuals whose Social Security number, driver’s license or state identification number, and/or financial account information may have been involved, BakoDx has arranged to offer free credit monitoring services to these individuals.

BakoDx has established a dedicated assistance line for individuals seeking additional information regarding this incident. Individuals with questions about this matter or who would like additional information (including which types of their data may have been involved), should call toll-free (855) 568-2161 from 9 am – 6:30 pm Eastern Time, Monday through Friday, except major U.S. holidays. Additional information can also be found on this website.

BakoDx is committed to protecting the privacy and security of personal information that it receives and regrets any inconvenience this incident may have caused. Individuals potentially affected by this incident are being mailed notices. Since it is possible that BakoDx may have insufficient contact information for some individuals, however, it is posting this substitute notice as permitted by HIPAA, and this substitute notice will remain active for at least 90 days.

Additional Information