MultiPlan, Inc.
ent_019ebcbf32f1901f36e9bc93d66950ae
Disclosures
7
State AG · HHS OCR · 5 jurisdictions
Multi-filing incidents
3
incidents joining 2+ filings here
Max affected reported
214,956
nationwide · HHS OCR NY
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- MultiPlan, Inc.
- Normalized
- multiplan— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 5493001DXJZWKKRPUT21
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (7)newest first
- Illinois State AGas victim2024-11-01
MULTIPLAN, INC filed a data-breach notice with the Illinois Attorney General in November 2024 (case 24-11-047). The register records the breach as discovered on September 18, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Maine State AGas victim2021-08-13
MultiPlan, Inc., a business associate of UltraBenefits, experienced a data breach on December 23, 2020, which was discovered on January 27, 2021. The breach was described as an external system hack, compromising Social Security numbers. Two Maine residents were affected and notified in writing on June 24, 2021. MultiPlan offered two years of credit monitoring, fraud consultation, and identity theft restoration services through Kroll. The total number of affected individuals was not disclosed.
- Massachusetts State AGas victim2021-06-28
MultiPlan, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-06-28. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas reporting2021-06-24
MultiPlan Inc., a vendor for Highmark Inc., notified Highmark members in Montana that an outside bad actor gained unauthorized access to an employee's email account between Dec 23, 2020 and Jan 27, 2021. The actor attempted to divert wire payments (BEC) and accessed personal information within billing communications. MultiPlan terminated access, reset credentials, engaged forensic experts, and reported to law enforcement. Affected individuals were offered two years of credit monitoring.
- NEW YORKHHS OCRas victim2021-06-24
MultiPlan reported to HHS on 2021-06-24 a Hacking/IT Incident affecting 214,956 individuals. Breached information located on Email. An employee was the victim of an email phishing attack exposing PHI including names, addresses, DOBs, claims, insurance info, and SSNs. MultiPlan notified HHS, individuals, and media, sanctioned the employee, revised policies, implemented technical safeguards, and retrained staff.
- Illinois State AGas victim2021-01-01
MULTIPLAN filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-267). The register records the breach as discovered on May 11, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2021-01-01
MULTIPLAN filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-384). The register records the breach as discovered on January 27, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.