HealthPlan Services, Inc.

HealthPlan Services, Inc. issued a supplemental notice to the New Hampshire Attorney General regarding a malware incident detected on June 23, 2022. The breach affected personal information of 3 New Hampshire residents. The company engaged forensic investigators, contained the network, and notified law enforcement. Remediation included security practice reviews and employee training.

HealthPlan Services, Inc. reported to HHS on 2023-04-28 a Hacking/IT Incident affecting 9,650 individuals. Breached information located on Network Server. The business associate was subject to a ransomware attack affecting PHI including names, addresses, SSNs, DOB, driver's license numbers, health insurance, and financial information. The BA provided complimentary credit monitoring and implemented additional safeguards.

HealthPlan Services, Inc. (HPS) detected malware on its network on June 23, 2022, which allowed an unauthorized party to access and acquire files between June 22 and June 23, 2022. HPS contained the network, alerted law enforcement, and engaged cybersecurity professionals. A forensic investigation concluded in late February/March 2023 that personal information, including full names and potentially health-related data, was acquired. HPS notified affected individuals on April 28, 2023, and offered 24 months of identity theft protection.

HealthPlan Services, Inc. reported an external system breach (hacking) occurring June 22-23, 2022, discovered March 21, 2023. The incident affected 9,457 individuals, including 1 Maine resident. Acquired data included names and Social Security Numbers. The entity, represented by McDonald Hopkins PLC, notified affected individuals in writing on April 28, 2023, and provided 24 months of identity theft protection services.

HealthPlan Services, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-04-28. The breach occurred on 6/23/2022. 185 Montana residents were affected.