Harvard Pilgrim Health Care

HARVARD PILGRIM HEALTH CARE, INC. filed a data-breach notice with the Illinois Attorney General in July 2026 (case 26-07-1328). The register records the breach as discovered on June 2, 2026. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Harvard Pilgrim Health Care reported a cybersecurity incident involving its subcontractor, Conduent Business Services. Unauthorized access occurred from October 21, 2024, to January 13, 2025. Conduent discovered the breach on January 13, 2025, and notified Harvard Pilgrim. The incident affected 505 individuals, including 4 Maine residents. Personal information, including names and other identifiers, was accessed. Conduent engaged forensic experts, secured networks, and notified law enforcement. Affected individuals were offered 12 months of credit monitoring.

Supplemental security breach notification filed by Mullen Coughlin LLC on behalf of Harvard Pilgrim Health Care with the Maryland Attorney General. A ransomware incident occurred between March 28, 2023, and April 17, 2023. The breach compromised personal information (names, addresses, DOB, SSN) and protected health information (clinical records, diagnoses) for approximately 8 Maryland residents in this specific supplemental notice. The investigation is ongoing.

Harvard Pilgrim Health Care reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-05-09. 1 Massachusetts residents were affected.

Harvard Pilgrim Health Care reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-28. 1 Massachusetts residents were affected.

Harvard Pilgrim Health Care reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-04. 1 Massachusetts residents were affected.

Harvard Pilgrim Health Care filed a supplemental notice with the Rhode Island Attorney General regarding a ransomware incident discovered on April 17, 2023. Unauthorized access occurred from March 28 to April 17, 2023, resulting in the copying of personal and protected health information (including SSNs, DOBs, and clinical data) for approximately 34,336 Rhode Island residents. The investigation is ongoing, and the company has engaged forensic experts and implemented additional safeguards.

Harvard Pilgrim Health Care experienced a ransomware incident. Unauthorized access occurred between March 28, 2023, and April 17, 2023. The organization discovered the incident on April 17, 2023. Data was copied and taken from systems. Affected data includes names, addresses, dates of birth, health insurance account information, and clinical information (diagnoses, treatments). This is a supplemental notice sent in January 2025. Two years of credit monitoring are offered.

Harvard Pilgrim Health Care disclosed a ransomware incident affecting systems used to service members, accounts, brokers, and providers. The breach occurred between March 28 and April 17, 2023. Data copied included names, addresses, DOBs, health insurance account info, and clinical data. Approximately 34,336 Rhode Island residents were identified as potentially impacted. The company engaged forensic experts, notified law enforcement, and offered two years of credit monitoring.

Harvard Pilgrim Health Care, a subsidiary of Point32Health, issued a supplemental notice regarding a ransomware incident discovered on April 17, 2023. The attack impacted systems servicing members, accounts, brokers, and providers. Data was copied between March 28 and April 17, 2023. The notice specifically identifies approximately 1,347 Rhode Island residents as potentially affected. Harvard Pilgrim took systems offline, engaged forensic experts, and is offering two years of credit monitoring.

Harvard Pilgrim Health Care reported a ransomware incident occurring March 28, 2023, discovered April 17, 2023. Data copied included PII, PHI, SSNs, and financial info. ~2.97M individuals affected nationwide, including 210,354 Maine residents. Investigation ongoing; credit monitoring offered.

Harvard Pilgrim Health Care experienced a ransomware incident discovered on April 17, 2023. Unauthorized access occurred between March 28 and April 17, 2023, during which data was copied and taken from systems. The incident involved personal information and protected health information (PHI) of members, accounts, brokers, and providers. Systems were taken offline to contain the threat. Third-party forensic experts were engaged. Additional cybersecurity safeguards were implemented. Affected individuals are offered two years of complimentary credit monitoring and identity protection services.

Harvard Pilgrim Health Care disclosed a ransomware incident discovered on April 17, 2023. Unauthorized access occurred between March 28 and April 17, 2023, resulting in data exfiltration. The company determined on August 15, 2024, that affected files contained personal and protected health information. The organization engaged forensic experts, notified law enforcement, and implemented additional cybersecurity safeguards.

Harvard Pilgrim Health Care, a healthcare organization, reported a data breach affecting over 2.8 million individuals. The incident, an external system breach (hacking), occurred on March 28, 2023, and was discovered on April 17, 2023. The compromised information includes names and Social Security numbers. Notification to affected individuals was sent on March 27, 2024.

Harvard Pilgrim Health Care, a subsidiary of Point32Health, disclosed a ransomware incident discovered on April 17, 2023. The attack impacted systems servicing members, accounts, brokers, and providers. Data was copied between March 28 and April 17, 2023, potentially exposing personal information including names, Social Security numbers, dates of birth, and driver's license numbers. Approximately 9,766 Rhode Island residents were specifically identified as impacted. The company took systems offline, notified law enforcement, engaged forensic experts, and offered two years of credit monitoring.

Harvard Pilgrim Health Care disclosed a ransomware incident discovered on April 17, 2023. Unauthorized access occurred between March 28 and April 17, 2023, resulting in data exfiltration. Personal information of members, including names and addresses, was potentially compromised. The company engaged forensic experts, notified law enforcement, and offered credit monitoring services.

Harvard Pilgrim Health Care disclosed a ransomware incident where an unauthorized party accessed systems from March 28 to April 17, 2023. The organization discovered the incident on April 17, 2023, and took systems offline to contain the threat. Investigation confirmed data was copied and taken. This supplemental notice informs affected individuals, including approximately 9,766 Rhode Island residents, about the potential exposure of personal and health information. Credit monitoring services are being offered.

Harvard Pilgrim Health Care disclosed a ransomware incident discovered on April 17, 2023, affecting systems servicing members and providers. Data was copied between March 28 and April 17, 2023. The notice, filed in Vermont on March 27, 2024, specifically identifies approximately 9,766 Rhode Island residents as potentially impacted. Affected data includes personal information such as names and government IDs. The company engaged forensic experts, took systems offline, and offered two years of credit monitoring.

Harvard Pilgrim Health Care reported a ransomware incident discovered on April 17, 2023. Unauthorized access led to data copying. The company took systems offline, engaged forensic experts, and notified law enforcement. Personal information, potentially including SSNs, was involved. Notices were sent on Feb 15, 2024, offering credit monitoring. At least 1,347 Rhode Island residents were impacted.

Harvard Pilgrim Health Care disclosed a ransomware incident where an unauthorized party accessed systems from March 28 to April 17, 2023. The organization discovered the incident on April 17, 2023, and took systems offline. Investigation confirmed data was copied and taken. This supplemental notice informs affected individuals, including California and Rhode Island residents, that their personal and health information may have been involved. Credit monitoring services are being provided.

Harvard Pilgrim Health Care, a subsidiary of Point32Health, issued a supplemental notice regarding a ransomware incident discovered on April 17, 2023. The attack occurred between March 28 and April 17, 2023, resulting in the encryption of systems and exfiltration of personal information, including names, SSNs, and dates of birth. Approximately 1,347 Rhode Island residents were identified as potentially affected. The company took systems offline, engaged forensic experts, and offered two years of credit monitoring.

Harvard Pilgrim Health Care reported an external system breach (hacking) occurring on March 28, 2023, discovered on April 17, 2023. The incident affected 2,632,275 individuals, including 993 Maine residents. Acquired data included names and Social Security Numbers. The company provided written notifications and offered 24 months of identity theft protection services.

Harvard Pilgrim Health Care experienced a ransomware incident affecting systems used to service clients, including UnitedHealthcare. Unauthorized access occurred between March 28, 2023, and April 17, 2023, with discovery on April 17, 2023. Data exfiltrated included names, addresses, SSNs, health insurance account info, and clinical information. Systems were taken offline, and forensic experts were engaged. Credit monitoring is offered.

Harvard Pilgrim Health Care reported a data breach affecting 2,550,922 individuals, including 875 Maine residents. The breach, discovered on April 17, 2023, occurred on March 28, 2023, and was described as an external system breach or hacking incident. The compromised information included names and Social Security numbers. Affected individuals were notified on August 25, 2023, and offered 24 months of credit monitoring services through IDX.

Harvard Pilgrim Health Care experienced a ransomware attack between March 28 and April 17, 2023, discovered on April 17, 2023. The incident impacted 1,025 Washington residents, exposing PHI, SSNs, and PII. UHC filed this notification on behalf of Harvard Pilgrim on August 25, 2023.