Secure Healthcare Information Management Issues a Notice on Data Security Incidents

Allentown, Pennsylvania, October 6, 2026 / PRNewswire / -- Secure Healthcare Information Management, LLC (referred to as “SHIM”) have recently notified individuals who may be affected that a data security incident may involve their personal information and/or protected health information. SHIM is a company that provides billing and medical management services for independent doctors and medical institutions in northeastern Pennsylvania.

SHIM indicates that on July 17, 2026, the company experienced a network interruption, and an investigation was immediately launched with the assistance of cybersecurity experts. The investigation revealed that at some point between July 6 and July 16, 2026, certain personal information was accessed or obtained by unauthorized parties. Subsequently, SHIM conducted a thorough review of the relevant documents to determine whether any personal information was contained within them. On September 18, 2026, SHIM confirmed the scope of impact of this incident and gathered sufficient information to issue a notification.

The information that may be affected includes names, dates of birth, social security numbers, driver's licenses or state identification numbers, medical information, and health insurance information.

SHIM indicates that upon discovering this incident, the company immediately took the aforementioned measures. SHIM The incident was also reported to the Civil Rights Office of the U.S. Department of Health and Human Services as well as consumer reporting agencies. SHIM Additionally, a number of measures were implemented to reduce the risk of similar incidents occurring in the future.

SHIM indicates that on October 6, 2026, the company mailed notifications regarding this incident to individuals whose identifiable address information it had. The notifications provided information about the incident, as well as resources that potentially affected individuals could use to protect their information. For eligible individuals, the notifications also included an opportunity to register for identity protection services for free through Cyberscout. Cyberscout is a company under TransUnion that specializes in providing fraud assistance and remediation services.

SHIM has established a free call center to answer questions related to this incident. The call center is open from 8:00 AM to 8:00 PM Eastern Time, Monday through Friday (except for major U.S. holidays), and the contact number is 1-833-516-7420. All affected individuals may be eligible to receive free identity protection services through Cyberscout. Those who have not yet received a notification letter must verify their eligibility through the call center before registering for the service. The deadline for registering for the service is January 4, 2027.