Posting Date: 14 Sep, 2026
Hillcrest Medical Research, LLC (“HMR”) is providing this notice regarding a data privacy incident that may have involved certain personal and protected health information.
On July 16, 2026, Hillcrest Medical Research, LLC identified that a former employee had downloaded/exported reports from our Clinical Conductor Database containing information relating to patients participating in or being considered for clinical research studies.
Our investigation determined that the former employee accessed and exported this information on March 16, 2026, March 24, 2026 and March 31, 2026. The individual is no longer employed by Hillcrest Medical Research, LLC and no longer has authorized access to our systems.
While we have confirmed that information was exported from our system, we have not identified evidence at this time that the information has been further disclosed, publicly released, sold, or otherwise misused. Our investigation and response to this incident are continuing.
Based on our investigation, the information contained in the exported report may have included:
The specific information involved varied individual and did not include all 3 fields noted above.
Upon discovering this incident, we immediately initiated an investigation and reviewed the former employee’s access to and activity within our clinical research systems.
We have taken additional steps to strengthen safeguards surrounding patient information, including reviewing user access permissions, audit logs, data-export capabilities, and procedures governing access to and use of patient information. We are also reviewing our privacy and security practices and implementing additional safeguards intended to reduce the risk of a similar incident occurring in the future.
We will continue to evaluate the circumstances surrounding this incident and will take additional corrective action as appropriate.
At this time, we have no information indicating that this information has been misused. Nevertheless, we encourage you to remain alert for unexpected communications requesting personal, medical, or financial information.
If a patient receives a suspicious communication claiming to be from Hillcrest Medical Research, LLC or concerning your participation in a clinical research study, please do not provide personal information in response to the communication. Instead, contact us directly using the information below so that we can assist you.
We sincerely regret any concern or inconvenience this incident may cause. Protecting the privacy and security of our patients’ information is important to us, and we are committed to addressing this matter appropriately.
If you have questions or would like additional information regarding this incident, please contact:
