Preserve notice materials
- The One Medical, One Medical Seniors, or Iora notice.
- The envelope, email headers, or portal message showing when and how the notice arrived.
- Any follow-up instructions or identity-protection offer included with the notice.
Evidence
What to preserve before sharing anything sensitive.
Keep copies of notices and follow-on suspicious activity, but do not upload medical records or identity documents through a public form.
Preserve misuse signals
- Suspicious emails, texts, calls, voicemails, or portal messages after the notice.
- Unexpected insurance Explanation of Benefits activity.
- Medicare or insurer communications about services you do not recognize.
- Credit, identity, bank, or account alerts connected to the same time period.
Track time and cost
- Time spent calling One Medical, insurers, Medicare, credit bureaus, or banks.
- Out-of-pocket costs for postage, monitoring, freezes, replacement documents, or related services.
- Dates when you placed fraud alerts, freezes, password changes, or account monitoring.
Do not put these in the public form
- Diagnoses, medications, treatment notes, lab results, medical chart files, or clinical details.
- Social Security numbers, Medicare IDs, full dates of birth, payment card numbers, account passwords, or government IDs.
- Raw medical records, insurance cards, identity documents, or downloaded breach files.