Harvard Pilgrim Health Care

Harvard Pilgrim Health Care, a subsidiary of Point32Health, disclosed a ransomware incident discovered on April 17, 2023, affecting systems used to service members, accounts, brokers, and providers. The breach involved unauthorized access from March 28 to April 17, 2023, resulting in the copying and exfiltration of personal and protected health information (PHI), including names, SSNs, DOBs, and clinical data. Harvard Pilgrim took systems offline, notified law enforcement, and engaged forensic experts. Affected individuals were offered two years of credit monitoring.