Clarinda Regional Health Center

Clarinda Regional Health Center (“Clarinda”) experienced a data security incident that may affect the privacy of certain individuals’ data. We take the privacy and security of all information within our possession very seriously. Please read the following information regarding the event carefully as it contains steps that you can take to protect your personal information, should you feel appropriate to do so. What Happened: On or around December 15, 2025, we learned that certain data within our network may have been accessed without authorization. In response, we promptly initiated an investigation and engaged cybersecurity experts to assist with the process. The investigation revealed that certain files may have been acquired by an unauthorized actor in or around October 23, 2025. After the investigation concluded, we undertook a comprehensive review of the relevant files with the assistance of a third-party vendor and determined that personal health information was involved. We then worked to secure the information needed to effectuate notice, including address information, for the impacted individuals. The process was completed on May 21, 2026. What Information Was Involved: The accessible information varies by individual but may include an individual’s name in combination with a Social Security number, date of birth, medical information, health insurance information, financial account number, driver’s license number, and taxpayer identification number. Clarinda provided notice of this event to the potentially affected individuals beginning on June 1, 2026. What We Are Doing: We promptly investigated the event to ensure the continued security of our environment and the data we hold to understand the nature and scope of what occurred. We provided this notice with information on steps you can protect your data. We implemented additional security measures to minimize the risk of a similar event occurring in the future. What You Can Do: You can follow the recommendations set forth below in the Steps You Can Take to Help Protect Your Personal Information section. For More Information: If you have questions that are not addressed through this notice, you may contact our dedicated assistance line at 1-833-289-3437 between the hours of 8:00 a.m. to 8:00 p.m. Eastern time, Monday through Friday, excluding holidays, or write to us directly at 220 Essie Davison Drive, Clarinda, IA 51632. Steps You Can Take to Help Protect Your Personal Information Review Your Account Statements and Notify Law Enforcement of Suspicious Activity: As a precautionary measure, we recommend that you remain vigilant by reviewing your account statements and credit reports closely. If you detect any suspicious activity on an account, you should promptly notify the financial institution or company with which the account is maintained. You also should promptly report any fraudulent activity or any suspected incidence of identity theft to proper law enforcement authorities, your state attorney general, and/or the Federal Trade Commission (the “FTC”). Copy of Credit Report: You may obtain a free copy of your credit report from each of the three major credit reporting agencies once every 12 months by visiting www.annualcreditreport.com/ , calling toll-free 1-877-322-8228, or by completing an Annual Credit Report Request Form and mailing it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348. You also can contact one of the following three national credit reporting agencies: Equifax Experian TransUnion P.O. Box 105851 P.O. Box 9532 P.O. Box 2000 Atlanta, GA 30348 Allen, TX 75013 Chester, PA 19016 1-800-525-6285 1-888-397-3742 1-833-799-5355 www.equifax.com www.experian.com www.transunion.com/get-credit-report Fraud Alert: You may want to consider placing a fraud alert on your credit report. An initial fraud alert is free and will stay on your credit file for at least one year. The alert informs creditors of possible fraudulent activity within your report and requests that the creditor contact you prior to establishing any accounts in your name. To place a fraud alert on your credit report, contact any of the three credit reporting agencies identified above. Additional information is available at www.annualcreditreport.com. For TransUnion: www.transunion.com/fraud-alerts . Security Freeze : You have the right to put a security freeze on your credit file for up to one year at no cost. This will prevent new credit from being opened in your name without the use of a PIN number that is issued to you when you initiate the freeze. A security freeze is designed to prevent potential creditors from accessing your credit report without your consent. As a result, using a security freeze may interfere with or delay your ability to obtain credit. You must separately place a security freeze on your credit file with each credit reporting agency. In order to place a security freeze, you may be required to provide the consumer reporting agency with information that identifies you including your full name, Social Security number, date of birth, current and previous addresses, a copy of your state-issued identification card, and a recent utility bill, bank statement or insurance statement. For TransUnion: www.transunion.com/credit-freeze. Additional Free Resources: You can obtain information from the consumer reporting agencies, the FTC, or from your respective state Attorney General about fraud alerts, security freezes, and steps you can take toward preventing identity theft. You may report suspected identity theft to local law enforcement, including to the FTC or to the Attorney General in your state. Federal Trade Commission 600 Pennsylvania Ave, NW Washington, DC 20580 consumer.ftc.gov 877-438-4338 California Attorney General 1300 I Street Sacramento, CA 95814 www.oag.ca.gov/privacy 800-952-5225 Iowa Attorney General 1305 E. Walnut Street Des Moines, Iowa 50319 www.iowaattorneygeneral.gov 888-777-4590 Maryland Attorney General 200 St. Paul Place Baltimore, MD 21202 www.marylandattorneygeneral.gov/Pages/CPD 888-743-0023 New York Attorney General The Capitol Albany, NY 12224 800-771-7755 ag.ny.gov NY Bureau of Internet and Technology 28 Liberty Street New York, NY 10005 www.dos.ny.gov/consumerprotection/ 212.416.8433 Oregon Attorney General 1162 Court St., NE Salem, OR 97301 www.doj.state.or.us/consumer-protection 877-877-9392 Rhode Island Attorney General 150 South Main Street Providence, RI 02903 www.riag.ri.gov 401-274-4400 Washington D.C. Attorney General 400 S 6th Street, NW Washington, DC 20001 oag.dc.gov/consumer-protection 202-442-9828 Kentucky Attorney General 700 Capitol Avenue, Suite 118 Frankfort, Kentucky 40601 www.ag.ky.gov 502-696-5300 NC Attorney General 9001 Mail Service Center Raleigh, NC 27699 ncdoj.gov/protectingconsumers/ 877-566-7226 You also have certain rights under the Fair Credit Reporting Act (FCRA): These rights include to know what is in your file; to dispute incomplete or inaccurate information; to have consumer reporting agencies correct or delete inaccurate, incomplete, or unverifiable information; as well as other rights. For more information about the FCRA, and your rights pursuant to the FCRA, please visit www.consumer.ftc.gov/sites/default/files/articles/pdf/pdf-0096-fair-credit-reporting-act.pdf .

Dr. Patel will begin seeing patients on May 14th, 2026