East Valley Pulmonary and Sleep Specialists

NOTICE OF DATA EVENT

August 25, 2026 – Desert Pulmonary & Sleep Consultants, P.L.C. (“DPSC”) is providing notice of a data event that may affect the privacy of certain individuals’ information (patient names and mailing addresses). DPSC takes this data event very seriously and is providing information about the data event, our response to it, and resources available to individuals to help protect their information, should they feel it appropriate to do so.

What Happened? On or around July 13, 2026, DPSC became aware of suspicious activity as relates to a prior physician partner of DPSC. That partner decided to transition out of DPSC and practice elsewhere. During his transition period, we have found that he took, starting June 29, 2026 and ending approximately 3 days later, he accessed over 3,000 names and addresses/protected health information of many patients, intending to let them know where he would be practicing via written letter and shared that information with an unknown and unauthorized person to assist him in sending letters. He was told very clear, in writing from DPSC’s legal counsel, not to engage in such activity. Despite requesting him, through his legal counsel, to explain what he did and who he shared PHI with, he and his legal counsel refused to respond.

Upon becoming aware, DPSC promptly began an investigation into the scope and nature of the suspicious activity, retained legal counsel and Vyon Technology to investigate the suspicious activity. DPSC’s investigation found that the prior partner accessed over 3000 names and addresses.

What Information Was Involved? The personal information potentially impacted by this event included: Name and mailing address. This information collected as part of a visit individuals may have had at DPSC and/or provided by other medical service providers.

What We Are Doing. DPSC is committed to ensuring the security and privacy of all personal information in its control. Upon discovery of the Event, DPSC moved quickly to investigate and respond to the event. Specifically, DPSC informed its legal counsel and began identifying the affected individuals in preparation for notice, as well as positing this notice on its website, publishing the notice in the Arizona Republic and notifying the Office of Civil Rights.

Additionally, DPSC provided guidance on how to better protect against identity theft and fraud, including providing information on how to place a fraud alert and security freeze on one’s credit file, the contact details for the national consumer reporting agencies, information on how to obtain a free credit report, a reminder to remain vigilant for incidents of fraud and identity theft by reviewing account statements and monitoring free credit reports, and the contact details for the Federal Trade Commission.

How Will Individuals Know If They Are Affected By This Data Event? DPSC is mailing a notice letter to individuals whose information was determined to be in the affected files, for whom a valid mailing address is available. If an individual does not receive a letter but would like to know if they are affected, they may call DPSC’s dedicated assistance line at 480-962-1650, Ext 208 between the hours of 8:00 a.m. to 8:00 p.m. Eastern time, Monday through Friday. This excludes all major U.S. holidays.

What You Can Do. We encourage individuals to remain vigilant against incidents of identity theft and fraud by reviewing your account statements, explanation of benefits forms, and monitoring your free credit reports for suspicious activity and to detect errors. Under U.S. law individuals are entitled to one free credit report annually from each of the three major credit reporting bureaus. To order a free credit report, visit www.annualcreditreport.com or call, toll-free, 877-322-8228. Individuals may also contact the three major credit bureaus directly to request a free copy of their credit report, place a fraud alert, or a security freeze. Contact information for the credit bureaus is below.

Consumers have the right to place an initial or extended “fraud alert” on a credit file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert, which is a fraud alert that lasts seven years. Should you wish to place a fraud alert, please contact any one of the three major credit reporting bureaus listed below.

As an alternative to a fraud alert, consumers have the right to place a “credit freeze” on a credit report, which will prohibit a credit bureau from releasing information in the credit report without the consumer’s express authorization. The credit freeze is designed to prevent credit, loans, and services from being approved in your name without your consent. However, you should be aware that using a credit freeze to take control over who gets access to the personal and financial information in your credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, or any other account involving the extension of credit. Pursuant to federal law, you cannot be charged to place or lift a credit freeze on your credit report. To request a security freeze, you may need to provide the following information, depending on whether the request is made online, by phone, or by mail:

1. Full name (including middle initial as well as Jr., Sr., II, III, etc.);

2. Social Security number;

3. Date of birth;

4. Addresses for the prior two to five years;

5. Proof of current address, such as a current utility bill or telephone bill;

6. A legible photocopy of a government-issued identification card (state driver’s license or ID card, etc.); and

7. A copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft if you are a victim of identity theft.

Should you wish to place a fraud alert or a credit freeze, please contact the three major credit reporting bureaus listed below: Equifax Experian TransUnion https://www.equifax.com/personal/creditreport-services 1-888-298-0045 Equifax Fraud Alert, P.O. Box 105069 Atlanta, GA 30348-5069 Equifax Credit Freeze, P.O. Box 105788 Atlanta, GA30348-5788 https://www.experian.com/help/ 1-888-397-3742 Experian Fraud Alert, P.O. Box 9554, Allen, TX 75013 Experian Credit Freeze, P.O. Box 9554, Allen, TX 75013 https://www.transunion.com/credit-help 1-800-916-8800 TransUnion Fraud Alert, P.O. Box 2000, Chester, PA 19016 TransUnion Credit Freeze, P.O. Box 160, Woodlyn, PA 19094