Krapf Group

The Krapf Group experienced a cybersecurity incident where an unauthorized actor accessed its network on or around November 17, 2020, and exfiltrated personal information including names, dates of birth, addresses, and Social Security numbers. The breach was discovered on November 23, 2020. The company engaged forensic investigators and is offering one year of Experian IdentityWorks monitoring to affected individuals. The investigation was ongoing as of the January 15, 2021 notification date.

Krapf Group, a health plan provider, reported a ransomware attack to HHS on January 19, 2021, affecting 610 individuals. The breached information was located on a network server and included names, dates of birth, addresses, Social Security numbers, and health insurance information. In response, the entity implemented additional security safeguards.

Affected (this filing): 610