HEALTH NET, INC.

Health Net notified members that its vendor, TTEC Healthcare Solutions, Inc., experienced a cyber incident between March 4, 2021, and September 12, 2021. An unauthorized actor viewed or downloaded data files containing member names, dates of birth, healthcare ID numbers, and clinical information including diagnoses. Health Net was informed on October 27, 2021. The incident has been contained, and forensic investigation is complete. Health Net activated its incident response plan, engaged cybersecurity firms, and notified law enforcement, including the FBI.

Health Net, LLC (CA, Health Plan) reported to HHS OCR on 2019-05-13 an Unauthorized Access/Disclosure affecting 2,404 individuals. The CE mailed PHI to wrong recipients via paper/films. PHI exposed included names, dates of birth, Social Security numbers, claims information, health insurance information, and treatment information. The CE implemented additional administrative and technical safeguards. OCR obtained assurances that corrective actions were implemented.

Health Net, Inc. reported a data breach to the California Attorney General. The incident occurred between April 1, 2013, and May 31, 2013. The filing includes sample notification letters for Health Net and CalViva members. Specific details regarding the nature of the breach, data types exposed, and number of individuals affected are contained within the attached PDF notification letters, which are not fully parsed in this extraction. Health Net is a healthcare organization.

Health Net, Inc. reported to HHS on 2013-07-02 a breach involving the erroneous mailing of identification cards for 8,331 members to their former addresses due to a contractor's system error. Breached information located on Paper/Films. The types of protected health information (PHI) included demographic information, such as members’ names. Following the breach, Health Net corrected the programming error and implemented a new program to ensure address syncing accuracy.

Health Net, Inc. notified the Hawaii Office of Consumer Protection of a data loss incident involving missing hard disk drives managed by vendor IBM. The drives contained personal information of members, employees, and providers, including names, addresses, health info, SSNs, and financial data. Approximately 1,175 Hawaii residents were affected. Health Net offered two years of identity protection and credit freeze fee reimbursement.

Health Net Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2011-03-14. 37,595 Massachusetts residents were affected. The report records the breach type as electronic.

Health Net, Inc. notified the NH AG of a breach involving missing hard disk drives from its data center move, managed by vendor IBM. Discovered Jan 21, 2011. Affected ~856 NH residents. Data included names, addresses, health info, SSNs, and financial data. Notices mailed March 14, 2011, offering 2 years of identity protection.

Health Net reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2010-01-29. 99 Massachusetts residents were affected. The report records the breach type as electronic.

Health Net reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2010-01-11. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Health Net reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2010-01-06. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Health Net, Inc. notified the New Hampshire Attorney General of a misdelivery incident on Jan 6, 2010. On Sept 9, 2009, a report containing members' names, enrollment dates, and Medicare SSNs was mistakenly sent to an insurance agent. One NH resident was affected. Health Net notified the agent, obtained CMS approval for notifications, and sent letters to affected individuals on Jan 4, 2010.

Health Net, Inc. reported the loss of an unencrypted portable computer disk drive containing personal information (SSNs, names, addresses, phone numbers, PHI, financial data) of approximately 504 New Hampshire residents. The incident occurred on or after May 14, 2009. Health Net engaged Debix for credit monitoring and fraud resolution, notified CMS and credit bureaus, and implemented additional security procedures.