Notice of Data Security Incident
Posted [August 15, 2026]
Medical Express PSI (PSI Premier Specialties, Inc. d/b/a Medical Express PSI) is providing this notice about a data security incident that may have involved personal and health-related information. We are posting this notice for individuals affected by the incident for whom we did not have a mailing address sufficient to send written notice. If you receive orthopedic durable medical equipment (DME) from Medical Express PSI, please review this notice.
What happened. Between approximately June 16 and June 18, 2026, an unauthorized third party gained access to certain Medical Express PSI email accounts through a phishing (business email compromise) attack. We discovered the incident on June 17, 2026, when our security monitoring detected unauthorized activity, and we disabled the affected account within minutes. Our investigation determined that the unauthorized party accessed certain individual email messages that contained personal information; it did not find that any of our email accounts were downloaded or copied in bulk.
What information was involved. The information that may have been involved varies by individual and may have included name, address, date of birth, medical treatment and diagnosis information, health insurance information, and information relating to medical billing. For some individuals, it may also have included a Social Security number.
What we are doing. Upon discovering the incident, we promptly secured the affected email accounts (including disabling access, resetting passwords, revoking active sessions, and resetting multi-factor authentication), engaged a third-party forensic firm to investigate, notified the Federal Bureau of Investigation, and implemented additional email-security and monitoring safeguards to help prevent a similar incident. We have notified affected individuals by mail where we had a valid address, are notifying applicable regulators, and are offering eligible individuals complimentary credit monitoring and identity-protection services at no cost.
What you can do. We encourage you to remain vigilant and to take the following steps:
-
Call the toll-free number below to find out whether your information was involved and, if so, to enroll in the complimentary credit-monitoring and identity-protection services being offered at no cost.
-
Review statements from your health insurer (including Explanations of Benefits) and your financial accounts, and report any charges or services you do not recognize.
-
Obtain free copies of your credit reports at annualcreditreport.com or by calling 1-877-322-8228, and review them for accounts or activity you do not recognize.
-
Consider placing a fraud alert or a security freeze on your credit file by contacting the three nationwide credit reporting agencies: Equifax (1-800-685-1111, equifax.com), Experian (1-888-397-3742, experian.com), and TransUnion (1-888-909-8872, transunion.com).
-
If you suspect identity theft, report it to the Federal Trade Commission at IdentityTheft.gov or 1-877-438-4338, and to local law enforcement.
For more information. To learn whether you were affected, to enroll in the complimentary services, or to ask questions, please call 1-833-788-9712, available Monday through Friday, 8:00 a.m. to 8:00 p.m. Central Time, excluding major holidays.
Medical Express PSI takes the privacy and security of personal information seriously, and we sincerely regret any concern this incident may cause.