Arbor Associates, Inc. works with healthcare providers to collect and analyze patient survey data. On April 17, 2025, the company noticed unusual activity on its network and began an investigation with independent cybersecurity experts. That investigation found that certain files may have been acquired without authorization between April 15 and April 17, 2025. In May 2025, after reviewing the affected files, Arbor determined that some individuals’ information was contained in the data that may have been accessed, and it worked with the relevant healthcare provider to send this notice.
The letter is addressed to patients of a healthcare provider that used Arbor’s survey analytics services. Arbor has not stated a total number of people affected in the portion of the notice provided here, so if you received this letter, it means your information was specifically identified as being in the affected files.
What information was exposed?
- First and last name
- Contact information
- Age
- Biological sex
- Date of birth
- Service date
- CPT or diagnosis code
- Medical record number
- Name of insurance
- Doctor’s name
What should you do now?
- Review any explanation of benefits (EOB) forms and account statements from your insurer or medical providers closely, and report anything you don’t recognize right away.
- Watch for signs of medical identity theft, such as unfamiliar charges, new insurance claims you didn’t file, or notices about medical debt collection for services you didn’t receive.
- Request a free copy of your credit report from each of the three major bureaus at annualcreditreport.com, and check for accounts or inquiries you don’t recognize.
- Consider placing a free fraud alert or a security freeze on your credit file with Equifax, Experian, and TransUnion, since this can make it harder for someone to open new credit in your name.
- Because medical record numbers, diagnosis codes, and insurance information were involved, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere.
- Report any suspected identity theft to your state attorney general, local law enforcement, or the Federal Trade Commission at consumer.ftc.gov.
If you have questions, Arbor Associates, Inc. can be reached at 1-833-367-8607, Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern time, or by mail at 1349 US Highway 131, Suite C, Petoskey, MI 49770.