FOR IMMEDIATE RELEASE:
March 27, 2024
Updated March 28, 2024
LAS VEGAS — The Southern Nevada Health District is taking steps to alert approximately 300 clients who completed transactions on the Environmental Health Invoice Payment form on its website from March 4-14, 2024, that their information might have been compromised. Payments made before or after this time are not believed to be compromised. Other areas of the website were not impacted.
What Happened
On or about March 4, a malicious code was placed on the Health District’s Environmental Health Invoice Payment page. The code redirected clients who paid invoices for environmental health permits or application fees. Clients were redirected to a fraudulent payment form that looked like a credit card payment page that was not affiliated with the Health District.
What is the Health District Doing
The Health District discovered the malicious code on March 14, and immediately removed the form. Law enforcement was notified and cybersecurity experts were retained to assist with further securing the site and investigating the incident. The Health District also rebuilt its web server to ensure any means of access used in this data security incident has been eliminated.
The Health District takes the security of its clients and patients seriously. The agency is continuing to work with law enforcement and security advisors to protect against future incidents. Clients who were impacted by this incident are receiving a letter from the Health District and offered services to assist with identity theft detection and resolution services. To date, no reports of credit misuse have been identified as a result of this incident.
What You Can Do
Letters are being mailed today to individuals or business representatives who completed transactions using the payment form during the impacted timeframe. A dedicated call center has been established for this incident. If people who are impacted have additional questions, or if someone believes their information was involved and they did not receive a letter, they can call 877-890-9332, from 6 a.m. to 6 p.m., Monday through Friday, and reference engagement number B11943.
UPDATE: If you did not receive a letter but have further questions or concerns, please call 833-931-3737 toll-free from 6 a.m. to 6 p.m. Monday through Friday. Provide engagement number B119434.
Moving Forward
The Health District is committed to protecting the information of the people and community it serves and to learning from this incident. Enhancements and refinements to its security measures are ongoing and will continue to evolve to ensure the agency is meeting the increasing challenges of cybersecurity.
The Southern Nevada Health District serves as the local public health authority for Clark County, Boulder City, Henderson, Las Vegas, Mesquite and North Las Vegas. The agency safeguards the public health of the community’s residents and visitors through innovative programs, regulations, and initiatives focused on protecting and promoting their health and well-being. More information about the Health District, its programs, services, and the regulatory oversight it provides is available at www.SNHD.info. Follow the Health District on Facebook, Twitter, and Instagram.