Since we only use Doctor Alliance to deliver orders for signature to Doctor offices that insist on using it, only a small number of patients that are seen by Shanadoa have been affected. These patients would have been on service prior to November 17 2025, and had a doctor that participates in Doctor Alliance. At this time we believe less than 350 patients, dating back to 2020 have been impacted at Shanadoa. We are sending a paper copy of this notice to the most recent address we have on file for affected individuals. If you do not wait to receive this notice, or have moved since your time using our services, please contact us at either our Toll-Free Phone:(877) 338-4759 or via Email: compliance@shanadoahh.com and we can determine if you are affected and answer questions you may have.

On January 12, we were notified by Doctor Alliance, abusiness associate that assists Shanadoa Home Health in processing physician
orders and clinical documentation, that an unauthorized party gained access to certain documents stored within their system.

The investigation determined that the unauthorized accessoccurred intermittently between October 31, 2025, and November 17,2025. The unauthorized individual gained access through compromisedcredentials and automated tools used to retrieve documents available within the
system.

Upon discovery of the incident, Doctor Alliance secured their systems, launched an investigation with third-party cybersecurity and forensic experts, and notified law enforcement authorities, including theFederal Bureau of Investigation (FBI).

Protecting patient information is extremely important to us.Upon learning of this incident, the following actions were taken:
• The affected systems were secured immediately.
• A comprehensive forensic investigation was conducted.
• Additional security controls and monitoring were implemented.
• Access authentication and credential protection measures were strengthened.
• Law enforcement and HHS were notified.
• Shanadoa Home Health has reviewed its own internal processes and continues working with the business associate to ensure enhanced protections are in place.

We remain committed to maintaining the privacy and securityof the information entrusted to us.

The investigation determined that the documents involved may have contained certain information related to your care at Shanadoa Home Health.
The types of information that may have been involved include:
• Patient identifiers
• Physician orders and clinical documentation
• Dates of service
• Medical record number
• Diagnosis or treatment information related to your home health care
At this time, there is no evidence that your information has been misused. However, out of an abundance of caution, we are notifyingyou so that you may take steps to monitor your information.

Although we are not aware of any misuse of patient information, we recommend that you remain vigilant by reviewing statements you receive from healthcare providers and health insurance plans. We reccomend that everyone take the following steps even if you are not among those affected by this breach.

You should:
•Carefully review your Explanation of Benefits (EOB) statements from your health insurer.
• Contact your healthcare provider or insurer if you see services listed that you did not receive.
• Report any suspicious activity related to your health care or insurance coverage.
• You may want to place a fraud alert or freeze your credit to prevent new accounts from being opened in your name. This
is free to do and more information may be found by visiting https://www.identitytheft.gov/Databreach

• Watch for phishing emails or calls that attempt to exploit the breach. Cybercriminals often use stolen data to craft
convincing scams.
Taking these steps can help ensure that any potential issues are identified and rectified promptly.