River City Data (“River City”) contracts with organizations to provide scanning and document management services. We place the utmost value on maintaining the privacy and security of the information we maintain for our customers. This notice is regarding a recent cybersecurity incident that involved certain information.

What Happened? On February 2, 2026, River City became aware that an unauthorized actor gained access to our environment. We immediately took all systems offline to investigate the incident with assistance from external cybersecurity experts and reported the incident to law enforcement. The investigation determined that between November 17, 2025, and January 15, 2026, the unauthorized actor obtained certain data stored on our system. We informed our provider customer, which conducted a detailed review of the involved data and identified individuals to whom it related.

What Information Was Involved? The information involved varies by individual and may include patient names, dates of birth, addresses, Social Security numbers, health insurance information, medical record numbers and/or health information, such as diagnoses, medications, test results, and treatment information.

What River City Is Doing. Data privacy and security are River City’s highest priorities and we take this incident very seriously. After becoming aware of the incident, we immediately took steps to contain it and, with the help of cybersecurity experts, confirmed that the unauthorized actor was eliminated from the environment. To help prevent a similar incident from happening in the future, we will continue to take steps to further strengthen the security of all our systems and applications.

On June 26, 2026, River City began notifying individuals whose information was involved in this incident. We are also providing resources that involved individuals can use to help protect their information, including complimentary credit monitoring and identity protection services for individuals whose Social Security numbers were involved in this incident.

What Individuals Can Do. As a precaution, River City recommends individuals review relevant statements for unrecognized transactions. In the event of suspicious activity, they are encouraged to contact the vendor or provider associated with the transaction immediately.

For More Information. River City has also established a dedicated, toll-free call center for questions about this incident. The call center may be reached at 844-959-7138 from 8:00 am to 5:30 pm Central Time, Monday through Friday, excluding major U.S. holidays.