Pinnacle Claims Management

Pinnacle Claims Management, a Business Associate (CA), reported to HHS on 2024-11-21 a Hacking/IT Incident (ransomware) affecting 1,119 individuals. Breached information was located on a Network Server. Compromised PHI included names, dates of birth, treatment information, and diagnoses. The BA notified HHS, affected individuals, and the media, provided substitute notice, and implemented additional technical safeguards.

Pinnacle Claims Management, Inc. notified the California AG of a data security incident discovered on July 23, 2024. The incident resulted from the exploitation of a security vulnerability in Progress Software's MOVEit file transfer application, a third-party service provider. A comprehensive review of data was completed on October 23, 2024. Affected data may include names and other personal information. The company engaged third-party cybersecurity experts and implemented additional security measures.

Pinnacle Claims Management, Inc. (PCMI), a health benefits administrator, experienced a data security incident on June 26, 2022. An unauthorized actor may have acquired personal information, including names and Social Security numbers, of individuals associated with employer health plans. PCMI engaged cybersecurity firms, secured its network, and offered 12 months of identity monitoring via Kroll.