Tufts Health Plan
ent_c4818861c76e7b2f4faaec9f
Disclosures
20
State AG · HHS OCR · 3 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
60,545
nationwide · HHS OCR MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Tufts Health Plan
- Normalized
- tufts health plan— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- tuftshealthplan.com
Disclosure history (20)newest first
- Massachusetts State AGas victim2024-08-28
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-08-28. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2023-09-21
Point32Health - Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-09-21. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2023-07-12
Point32Health - Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-12. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2022-11-18
Point32Health - Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-11-18. 1 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGas victim2021-02-22
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-02-22. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2020-11-27
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-11-27. 913 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas victim2020-11-27
Tufts Health Plan notified the New Hampshire Attorney General of a data security incident involving its business associate, EyeMed Vision Care LLC. An unauthorized individual accessed an EyeMed email mailbox from June 24 to July 1, 2020, and sent phishing emails to contacts in the mailbox. The incident potentially affected 42 New Hampshire residents, exposing names, addresses, dates of birth, SSNs, and some medical information. EyeMed secured the account, engaged forensic investigators, and provided two years of credit monitoring to affected individuals.
- MASSACHUSETTSHHS OCRas victim2020-11-25
Tufts Health Plan (MA, Health Plan) reported to HHS on 2020-11-25 a Hacking/IT Incident affecting 60,545 individuals. A business associate employee was the victim of an email phishing attack. PHI involved included names, addresses, Social Security numbers, dates of birth, and treatment and health insurance information. Breached information located in Email. CE notified HHS, affected individuals, and media, and posted substitute notice on its website. OCR provided technical assistance on breach reporting requirements.
- Massachusetts State AGas victim2020-11-09
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-11-09. 45 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2020-10-02
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-10-02. 206 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2020-08-31
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-08-31. 111 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2020-02-28
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-02-28. 53 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2020-02-28
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-02-28. 9 Massachusetts residents were affected. The report records the breach type as electronic.
- Illinois State AGas victim2020-01-01
TUFTS HEALTH PLAN filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-503). The register records the breach as discovered on June 24, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Massachusetts State AGas victim2019-10-16
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-10-16. 3 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2019-02-04
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-02-04. 14 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas reporting2017-02-01
Tufts Public Health Plans, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-02-01. 380 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas reporting2017-01-31
Summit Reinsurance Services, Inc. experienced a ransomware incident affecting a server containing Tufts Health Public Plans, Inc. member data. Unauthorized access began March 13, 2016; discovered August 8, 2016. Data included names, SSNs, and medical records. One NH resident notified on Jan 31, 2017. Tufts voluntarily reported to NH AG.
- Massachusetts State AGas victim2016-04-11
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-04-11. 6 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGas victim2014-04-24
Tufts Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-04-24. 7,100 Massachusetts residents were affected. The report records the breach type as electronic.