WebTPA Employer Services, LLC

Supplemental notice from WebTPA Employer Services, LLC to the New Hampshire Attorney General regarding a previously reported data security incident. Approximately 5,778 NH residents were notified by mail. WebTPA is offering two years of complimentary identity monitoring and established a dedicated call center.

WebTPA Employer Services, LLC detected suspicious activity on its network on December 28, 2023. An investigation revealed that an unauthorized actor may have accessed personal information between April 18 and April 23, 2023. The incident affected individuals whose data was held by WebTPA in its role providing administrative services to benefit plans and insurance companies. WebTPA engaged third-party cybersecurity experts, notified law enforcement, and is offering two years of identity monitoring services to affected individuals.

WebTPA Employer Services, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2024-05-08. The breach occurred from 3/6/2023 to 5/12/2023. 4,423 Montana residents were affected.

WebTPA Employer Services, LLC detected suspicious activity on its network on December 28, 2023. An investigation revealed an unauthorized actor may have accessed personal information between April 18 and April 23, 2023. The company notified federal law enforcement and engaged third-party cybersecurity experts. Affected individuals are offered two years of identity monitoring. Financial and health data were not impacted.

WebTPA Employer Services, LLC reported to HHS on 2024-05-08 a Hacking/IT Incident affecting 2518533 individuals. Breached information located on Network Server. Business Associate present.

WebTPA Employer Services, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-06 and was reported on 2024-05-08. 20,085 Indiana residents were affected. 2,429,175 individuals affected in total.

WebTPA Employer Services, LLC reported a data security incident to the New Hampshire Attorney General on May 8, 2024. Unauthorized access occurred via a VPN connection starting March 6, 2023, with exfiltration between April 18-23, 2023. The breach affected at least 3,510 New Hampshire residents, exposing eligibility files containing personal information. WebTPA notified law enforcement, engaged third-party experts, and offered complimentary identity monitoring services to affected individuals.

WebTPA Employer Services, LLC detected suspicious activity on its network on December 28, 2023. An investigation determined that an unauthorized actor may have accessed personal information between April 18 and April 23, 2023. The incident affected individuals whose data was held by WebTPA in its role providing administrative services to benefit plans and insurance companies, including Transamerica Life Insurance Company. WebTPA engaged third-party cybersecurity experts, notified law enforcement, and is offering two years of identity monitoring services to affected individuals.

WebTPA Employer Services, LLC reported a data breach where unauthorized actors accessed personal information (including SSNs and DOBs) between April 18-23, 2023. The incident was detected on December 28, 2023. WebTPA engaged third-party forensic experts, notified law enforcement, and provided two years of credit monitoring via Kroll to affected individuals.