Highmark Inc

Highmark Health disclosed a cybersecurity incident discovered on December 15, 2022, involving a phishing email sent to an employee. The employee's email account was compromised between December 13 and 15, 2022. The threat actor accessed emails containing Protected Health Information (PHI) of Highmark members. Affected data includes names, SSNs, member IDs, claims/treatment info, financial account numbers, passwords, addresses, DOBs, and phone numbers. Highmark shut down the mailbox, reset passwords, implemented network blocking, and provided 24 months of Experian IdentityWorks.