Security
Report a Data Breach
If you suspect a data breach or security incident involving your protected health information, please report it immediately. We take every report seriously and respond promptly.
What Constitutes a Data Breach
A data breach is an impermissible use or disclosure of protected health information that compromises its security or privacy. Examples include:
Unauthorized Access
Someone accessed your health records without proper authorization, including unauthorized login to your account.
Accidental Disclosure
Your health information was sent to the wrong person, shared publicly, or disclosed without your consent.
System Compromise
A cyberattack, malware, or technical vulnerability that exposed or may have exposed personal health data.
Lost or Stolen Devices
A device containing unencrypted health information was lost, stolen, or improperly disposed of.
How to Report a Breach
Contact Us Immediately
Email security@elderwise.ai with the subject "Breach Report." Include as much detail as possible about the suspected incident, including when it occurred and what information may have been affected.
Preserve Evidence
If possible, do not delete any relevant emails, messages, or logs. Take screenshots of any suspicious activity. This information will help our security team investigate.
Secure Your Account
Change your password immediately if you suspect unauthorized access. Enable two-factor authentication if you have not already done so.
Our Response Process
When a breach is reported, Elderwise follows a structured response protocol:
Investigation -- Our security team will investigate the reported incident within 24 hours of receiving the report.
Containment -- We take immediate steps to contain the breach and prevent further unauthorized access or disclosure.
Notification -- Affected individuals will be notified within 60 days as required by HIPAA. We also report to the U.S. Department of Health and Human Services as required.
Remediation -- We implement measures to prevent similar incidents, including system updates, additional training, or policy changes.
Need to Report Urgently?
For urgent breach reports, contact our security team directly. All reports are treated as confidential.
Email Security Team