Medical College of Wisconsin Provides Notice of Data Security Incident

Milwaukee, November 14, 2023 –  The privacy and security of the personal information we maintain is of the utmost importance to Medical College of Wisconsin (“MCW”).

MCW received notice from one of our third-party vendors regarding a security vulnerability in the MOVEit Transfer solution which is utilized by MCW. Upon being informed of the vulnerability, MCW immediately took actions to mitigate and assess the scope of information potentially compromised, including engaging third-party professionals to assist in the investigation and remediation of the vulnerability. As part of our investigation, we engaged leading cybersecurity experts to identify what personal information, if any, was involved.

After an extensive forensic investigation and manual document review, we discovered on or about September 21, 2023, that one or more of the files potentially removed by the unauthorized party on or about May 27, 2023, contained personal information pertaining to various individuals, such as one or more of the following types of information: full names, dates of birth, Social Security numbers, driver’s license/government identification numbers, financial account information, medical record/patient account number(s), medical diagnosis/treatment information, medical provider name(s), lab results, prescription information, and health insurance information.

MCW has no evidence that any personal information has been or will be misused as a direct result of this incident. However, out of abundance of caution, commencing on November 14, 2023, MCW notified individuals whose information may have been included in the files potentially removed by the unauthorized party. Notified individuals have been provided with best practices to protect their information, and individuals whose Social Security numbers were contained in the impacted files have been offered complimentary credit monitoring. Notified individuals should also review the preventive measures outlined in the “Other Important Information” section (PDF).

MCW is committed to maintaining the privacy of personal information in its possession and has taken many precautions to safeguard it. MCW continually evaluates and modifies its practices to enhance the security and privacy of the personal information it maintains.

For individuals who have questions or need additional information regarding this incident, or to determine if they are impacted, MCW has established a dedicated toll-free response line at 1-800-630-1337. The response line is available Monday through Friday, 6 a.m. to 8 p.m. Pacific, and Saturday and Sunday, 8 a.m. to 5 p.m. Pacific (excluding major US holidays).