CoPilot Provider Support Services

CoPilot Provider Support Services, Inc. experienced unauthorized access to its database via a website used by physicians to check insurance coverage for ORTHOVISC and MONOVISC injections. The incident occurred in October 2015 and was discovered on December 23, 2015. An individual accessed the database through unauthorized means and downloaded health information, including names, dates of birth, addresses, phone numbers, and medical insurance card information. One version of the notice indicated Social Security numbers were not involved, while another indicated they were. CoPilot engaged a cybersecurity firm, referred the matter to law enforcement, and offered one year of identity monitoring through Kroll.

CoPilot Provider Support Services reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-01-19. 5,151 Massachusetts residents were affected. The report records the breach type as electronic.

CoPilot Provider Support Services, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2017-01-19. The breach was discovered on 12/23/2015. 220,000 individuals were affected. Notice was sent on 1/18/2017.

CoPilot Provider Support Services, Inc. notified Montana residents of a data security incident occurring in October 2015. Unauthorized access to the monovischcp.com website resulted in the download of personal and health information, including SSNs and insurance details. CoPilot engaged forensic investigators, referred the matter to law enforcement, and offered one year of Kroll identity monitoring services.

CoPilot Provider Support Services, Inc. notified Washington AG of unauthorized access to its website portal in Dec 2015. Data accessed included names, DOB, addresses, insurance info, and SSNs for 1,522 residents. Incident resolved; law enforcement notified; credit monitoring offered.

CoPilot Provider Support Services, Inc. notified the NH AG of unauthorized access to its website database starting in October 2015. The incident affected 728 NH residents, exposing names, DOBs, addresses, insurance info, and SSNs for a subset. CoPilot identified the individual responsible, notified law enforcement, and provided credit monitoring.