INFORMATION ON THE PRECAUTIONS TO BE TAKEN IN RESPECT OF PHISHING

Since it is possible that our patients’ personal information was stolen during the security incident at our hosting service provider, we recommend that you apply good anti-phishing practices and be particularly vigilant regarding e-mails sent in the name of GRS Medical or by third parties, as well as to other communications (calls or texts) which could ask for more information about you.

For example:

• Be alert to emails or other communications (calls or texts) that may request sensitive personal information, such as social insurance number, credit card number or electronic passwords.
• Be careful with unsolicited third-party links or attachments, as unsolicited third-party emails or texts could contain computer viruses or other types of malware.
• Pay special attention to emails, texts and calls that:

• Inform you of a problem, that you are the victim of fraud or other serious situations and that you must provide personal information to resolve the situation;
• offer you a reward or discount that you have not requested in exchange for personal information;

• place you in an emergency situation that prompts you to act quickly, since the goal is to get you to take an impulsive and immediate action.

If you receive an email or other communication (call or text) requesting sensitive information that appears to be from GRS Medical or any other source (e.g. financial institutions, Facebook, Microsoft, Amazon, etc.), you should ignore it or contact GRS Medical or the actual source directly (using the correct contact details you can find on the Internet). Under no circumstances should you use the phone number or hyperlink that might be included in the email or text message, since these are generally fraudulent. Opening attachments to such suspicious messages is also not recommended.