NOTICE OF DATA SECURITY INCIDENT
Date of Notice: October 28, 2026
We are issuing this public notice to inform families, representatives, and prospective residents of our GLSL and WSL communities regarding a recent data security incident involving a third-party software vendor, ECP, which manages our customer relationship management (CRM) platform.
What Happened?
On September 24, ECP identified an unauthorized system access file exposure within the CRM portion of their services. We were officially notified of the issue on October 16, 2026.
What Information Was Involved?
Please be assured that no financial accounts, bank details, or Social Security Numbers were involved or exposed. The data in this file was strictly restricted to limited historical administrative and inquiry records from 2019 through 2023, which may have included names, phone numbers, email addresses, birthdates, and short historical notes regarding care inquiries or diagnoses.
What We Are Doing
Upon being notified, we immediately confirmed that ECP secured and contained the vulnerability. We are actively auditing our vendor agreements to ensure the highest data protection protocols are maintained. Where current mailing addresses are available on file, we have initiated direct written notifications.
What You Can Do
Because we lack up-to-date mailing addresses for a portion of historical inquiries, we are hosting this public notice. If you or a family member submitted an inquiry or had administrative records stored in our CRM platform between 2019 and 2023, you may call our dedicated line to verify if your name was included on the vendor’s list.
We recommend staying vigilant against unsolicited text messages or phone calls from unknown parties pretending to represent our facilities.
To Check Your Status
We have established a dedicated, toll-free information line to answer your questions and help you verify if your information was included.
- Toll-Free Phone Number: 1-877-313-4579
- Hours of Operation: 9:00 AM–4:00 PM Central Time
This public notice will remain active for 90 days in compliance with federal reporting standards.
