HealthPlan Services, Inc.

HealthPlan Services, Inc. detected malware on its network on June 23, 2022. An unauthorized party accessed and acquired files containing personal and health information. The incident affected 3 New Hampshire residents. The company contained the network, engaged forensic investigators, and notified affected individuals starting April 28, 2023. This filing is a supplemental update to a prior notification.

HealthPlan Services, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2022-06-22 and was reported on 2023-05-19. 1 Indiana residents were affected. 9,684 individuals affected in total.

HealthPlan Services, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-05-17. 2 Massachusetts residents were affected. The report records the breach type as electronic.

HealthPlan Services, Inc. notified the NH Attorney General of a malware incident detected on June 23, 2022. Unauthorized access affected 2 NH residents, involving personal information. Response included forensic investigation, law enforcement alert, and credit monitoring offers.

HealthPlan Services, Inc. reported to HHS on 2023-04-28 a Hacking/IT Incident affecting 9,650 individuals. Breached information located on Network Server. The business associate was subject to a ransomware attack affecting PHI including names, addresses, SSNs, DOB, driver's license numbers, health insurance, and financial information. The BA provided complimentary credit monitoring and implemented additional safeguards.

HealthPlan Services, Inc. (HPS) detected malware on its network on June 23, 2022, which allowed an unauthorized party to access and acquire files between June 22 and June 23, 2022. HPS contained the network, alerted law enforcement, and engaged cybersecurity professionals. A forensic investigation concluded in late February/March 2023 that personal information, including full names and potentially health-related data, was acquired. HPS notified affected individuals on April 28, 2023, and offered 24 months of identity theft protection.

HealthPlan Services, Inc. reported an external system breach (hacking) occurring June 22-23, 2022, discovered March 21, 2023. The incident affected 9,457 individuals, including 1 Maine resident. Acquired data included names and Social Security Numbers. The entity, represented by McDonald Hopkins PLC, notified affected individuals in writing on April 28, 2023, and provided 24 months of identity theft protection services.

HealthPlan Services, Inc. notified Montana residents of a malware incident on June 23, 2022, where unauthorized access led to the acquisition of personal and health information. The company contained the network, engaged forensic investigators, and alerted law enforcement. Notification was sent in April 2023, offering 24 months of credit monitoring.

HEALTHPLAN SERVICES, INC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-322). The register records the breach as discovered on February 28, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHPLAN SERVICES, INC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-284). The register records the breach as discovered on February 28, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHPLAN SERVICES INC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-291). The register records the breach as discovered on June 22, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.