MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICPHIHEALTH_BASICMediumContained
Harvard Pilgrim Health Care
bd_e97c70caa0c2a5f5 · schema v1 · pii pii-v1
Full breach record for Harvard Pilgrim Health Care →Harvard Pilgrim Health Care disclosed a ransomware incident affecting systems used to service members, accounts, brokers, and providers. The breach occurred between March 28 and April 17, 2023. Data copied included names, addresses, DOBs, health insurance account info, and clinical data. Approximately 34,336 Rhode Island residents were identified as potentially impacted. The company engaged forensic experts, notified law enforcement, and offered two years of credit monitoring.
Vermont clock✗ VT AG >45 bday22 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_6137e2525e0f8889California State AGfiled 2025-01-21Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-21-harvard-pilgrim-health-care-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 21, 2025
- Raw hash
- e745b98d51ddab464fd1de60759e7f3fd7bb92364c27db1eb38db5c998389f64
Reporting entity
- Name
- Harvard Pilgrim Health Carenorm: harvard pilgrim health care
- Domain
- point32health.org
Victim entity
- Name
- Harvard Pilgrim Health Carenorm: harvard pilgrim health care
- Domain
- point32health.org
Incident
- Discovered
- Apr 17, 2023
- Materiality determined
- Dec 30, 2024
- Notification sent
- Jan 21, 2025
- Affected individuals
- 34,336
- Data types
- IDENTITY_BASICPHIHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified regulators
Compliance
- Time to disclose
- 22 months(645 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.