AmeriHealth Caritas Delaware, Inc.

AmeriHealth Caritas Delaware reported to HHS on 2024-07-01 a Hacking/IT Incident affecting 2823 individuals. Breached information located on Network Server. A vendor of its business associate experienced a cyber-attack compromising PHI including names, phone numbers, and diagnoses. The CE, BA, and vendor implemented additional administrative and technical safeguards.

Marigold, a third-party administrator for AmeriHealth Caritas Delaware, experienced a cybersecurity incident on June 28, 2024. An unauthorized party accessed a file server containing personally identifiable information (PII) and protected health information (PHI) of approximately 100,000 individuals. The breach involved the exploitation of a vulnerability in a public-facing application. AmeriHealth Caritas Delaware is notifying affected members and offering 12 months of credit monitoring services.

AmeriHealth Caritas Family of Companies notified providers in South Carolina that a former employee improperly downloaded confidential company information, including names and Social Security numbers, to a personal hard drive in November 2019. The company contacted law enforcement and offered two years of credit monitoring.

AmeriHealth Caritas Delaware reported an insider threat incident on November 15, 2019, where a terminated employee improperly downloaded confidential provider data, including names and Social Security numbers, to a personal hard drive. The breach affected 35,967 individuals nationwide, with 1,393 Delaware residents. The company notified the FBI, offered two years of credit monitoring via Experian, and sent notification letters to affected residents on January 14, 2020.