Harvard Pilgrim Health Care

Harvard Pilgrim Health Care, a subsidiary of Point32Health, disclosed a ransomware incident discovered on April 17, 2023, affecting systems used to service clients including UnitedHealthcare. Unauthorized access occurred between March 28 and April 17, 2023, resulting in the copying and exfiltration of personal and protected health information (PHI), including SSNs, DOBs, and clinical data. The breach impacted approximately 22,365 Rhode Island residents. Harvard Pilgrim took systems offline, engaged forensic experts, and notified law enforcement and regulators. Affected individuals were offered two years of credit monitoring.