Point32Health

Harvard Pilgrim Health Care experienced a ransomware incident. Unauthorized access occurred between March 28, 2023, and April 17, 2023. The organization discovered the incident on April 17, 2023. Data was copied and taken from systems. Affected data includes names, addresses, dates of birth, health insurance account information, and clinical information (diagnoses, treatments). This is a supplemental notice sent in January 2025. Two years of credit monitoring are offered.

Harvard Pilgrim Health Care, a subsidiary of Point32Health, issued a supplemental notice regarding a ransomware incident discovered on April 17, 2023. The attack impacted systems servicing members, accounts, brokers, and providers. Data was copied between March 28 and April 17, 2023. The notice specifically identifies approximately 1,347 Rhode Island residents as potentially affected. Harvard Pilgrim took systems offline, engaged forensic experts, and is offering two years of credit monitoring.

Harvard Pilgrim Health Care, a subsidiary of Point32Health, disclosed a ransomware incident discovered on April 17, 2023. The attack impacted systems servicing members, accounts, brokers, and providers. Data was copied between March 28 and April 17, 2023, potentially exposing personal information including names, Social Security numbers, dates of birth, and driver's license numbers. Approximately 9,766 Rhode Island residents were specifically identified as impacted. The company took systems offline, notified law enforcement, engaged forensic experts, and offered two years of credit monitoring.

Harvard Pilgrim Health Care, a subsidiary of Point32Health, issued a supplemental notice regarding a ransomware incident discovered on April 17, 2023. The attack occurred between March 28 and April 17, 2023, resulting in the encryption of systems and exfiltration of personal information, including names, SSNs, and dates of birth. Approximately 1,347 Rhode Island residents were identified as potentially affected. The company took systems offline, engaged forensic experts, and offered two years of credit monitoring.

Harvard Pilgrim Health Care, a subsidiary of Point32Health, disclosed a ransomware incident discovered on April 17, 2023, affecting systems used to service clients including UnitedHealthcare. The breach impacted data from March 28 to April 17, 2023, involving names, SSNs, DOBs, and clinical information. Approximately 22,365 Rhode Island residents were identified as potentially affected. The company took systems offline, engaged forensic experts, and offered two years of credit monitoring.

Harvard Pilgrim Health Care, a subsidiary of Point32Health, disclosed a ransomware incident discovered on April 17, 2023, affecting systems used to service members, accounts, brokers, and providers. The breach involved unauthorized access from March 28 to April 17, 2023, resulting in the copying and exfiltration of personal and protected health information (PHI), including names, SSNs, DOBs, and clinical data. Harvard Pilgrim took systems offline, notified law enforcement, and engaged forensic experts. Affected individuals were offered two years of credit monitoring.

Point32Health, a business associate of Health Plans, Inc., experienced a ransomware incident detected on April 17, 2023. Unauthorized access occurred between March 28 and April 17, 2023, resulting in data copying. Affected data includes PII and PHI of HPI subscribers. Point32Health engaged forensic experts, notified law enforcement, and is offering credit monitoring. Investigation was active as of the notice date.

Harvard Pilgrim Health Care, a subsidiary of Point32Health, disclosed a ransomware incident discovered on April 17, 2023, affecting systems used to service clients including UnitedHealthcare. Unauthorized access occurred between March 28 and April 17, 2023, resulting in the copying and exfiltration of personal and protected health information (PHI), including SSNs, DOBs, and clinical data. The breach impacted approximately 22,365 Rhode Island residents. Harvard Pilgrim took systems offline, engaged forensic experts, and notified law enforcement and regulators. Affected individuals were offered two years of credit monitoring.