AmeriHealth Caritas Delaware, Inc.

AmeriHealth Caritas Delaware reported to HHS on 2024-07-01 a Hacking/IT Incident affecting 2823 individuals. Breached information located on Network Server. A vendor of its business associate experienced a cyber-attack compromising PHI including names, phone numbers, and diagnoses. The CE, BA, and vendor implemented additional administrative and technical safeguards.

Marigold, a third-party administrator for AmeriHealth Caritas Delaware, experienced a cybersecurity incident on June 28, 2024. An unauthorized party accessed a file server containing personally identifiable information (PII) and protected health information (PHI) of approximately 100,000 individuals. The breach involved the exploitation of a vulnerability in a public-facing application. AmeriHealth Caritas Delaware is notifying affected members and offering 12 months of credit monitoring services.

AmeriHealth Caritas Family of Companies notified the NH AG of a breach involving a terminated employee who downloaded provider data (names, SSNs, DOBs) to a personal hard drive. 11 NH providers affected. Law enforcement notified; credit monitoring offered.

AmeriHealth Caritas Family of Companies notified providers in South Carolina that a former employee improperly downloaded confidential information, including names and SSNs, to a personal hard drive on November 15, 2019. The company contacted law enforcement and offered two years of credit monitoring. No improper use was known.

AmeriHealth Caritas Delaware reported that a former employee improperly downloaded company confidential information, including provider names and Social Security numbers, to a personal hard drive on November 15, 2019. The employee refused to return or destroy the drive. The incident affected 1,393 Delaware residents and 35,967 individuals nationwide. The company notified law enforcement (FBI) and offered two years of credit monitoring and identity theft protection via Experian IdentityWorks. Notices were sent on January 14, 2020.