Harvard Pilgrim Health Care

Harvard Pilgrim Health Care, a subsidiary of Point32Health, disclosed a ransomware incident discovered on April 17, 2023, affecting systems used to service clients including UnitedHealthcare. Unauthorized access occurred between March 28 and April 17, 2023, resulting in the copying and exfiltration of personal and protected health information (PHI), including SSNs, DOBs, and clinical data. The breach impacted approximately 22,365 Rhode Island residents. Harvard Pilgrim took systems offline, engaged forensic experts, and notified law enforcement and regulators. Affected individuals were offered two years of credit monitoring.

Affected (this filing): 22,365

Harvard Pilgrim Health Care reported an external system breach (hacking) occurring on March 28, 2023, discovered on April 17, 2023. The incident affected approximately 2,550,922 individuals, including 153,145 Maine residents. Acquired data included names and Social Security Numbers. The entity provided written notification and offered 24 months of credit monitoring.

Affected (this filing): 2,550,922

Harvard Pilgrim Health Care reported a data breach to the Oregon Attorney General. The breach was reported on 2023-06-15. The breach occurred during 3/28/2023 - 4/17/2023. The breach was discovered on 4/17/2023. 2,550,922 individuals were affected. Notice was sent on 6/15/2023.

Affected (this filing): 2,550,922

Harvard Pilgrim Health Care notified affected individuals on June 15, 2023, of a ransomware incident discovered on April 17, 2023. The attack impacted systems servicing members, accounts, brokers, and providers. Data copied between March 28 and April 17, 2023, may contain personal and protected health information, including names, addresses, SSNs, and clinical data. The company took systems offline, notified law enforcement, and engaged forensic experts. Remediation includes implementing additional cybersecurity safeguards. Two years of credit monitoring are offered.

Harvard Pilgrim Health Care, a health sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2023-04-17 and filed notice on 2023-06-15. 8,358 Washington residents were affected. 59 days elapsed between awareness and notification. 20 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 8,358

Harvard Pilgrim Health Care reported a data breach to the Montana Attorney General. The breach was reported on 2023-06-15. The breach occurred from 3/28/2023 to 4/17/2023. 1,415 Montana residents were affected.

Affected (this filing): 1,415

Harvard Pilgrim Health Care reported a ransomware incident discovered on April 17, 2023, affecting systems servicing members and providers. Unauthorized access occurred between March 28 and April 17, 2023, resulting in data exfiltration. Personal information and protected health information were compromised. The organization took systems offline, engaged forensic experts, notified law enforcement, and offered credit monitoring services.

Harvard Pilgrim Health Care reported a ransomware incident discovered on April 17, 2023, affecting systems servicing members and providers. Data copied between March 28 and April 17, 2023, may include PII, PHI, SSNs, and clinical data. The company took systems offline, engaged forensic experts, and offered two years of credit monitoring. No specific affected count was disclosed in this supplemental notice.

Harvard Pilgrim Health Care, a subsidiary of Point32Health, disclosed a ransomware incident discovered on April 17, 2023, affecting systems used to service members, accounts, brokers, and providers. The breach involved unauthorized access from March 28 to April 17, 2023, resulting in the copying and exfiltration of personal and protected health information (PHI), including names, SSNs, DOBs, and clinical data. Harvard Pilgrim took systems offline, notified law enforcement, and engaged forensic experts. Affected individuals were offered two years of credit monitoring.

Harvard Pilgrim Health Care reported a data breach affecting 2,550,922 individuals, including 198,829 Maine residents. The breach, which occurred on March 28, 2023, and was discovered on April 17, 2023, was described as an external system breach (hacking). The compromised information includes names and Social Security numbers. Affected individuals were notified on July 20, 2023, and offered 24 months of identity theft protection services through IDX.

Affected (this filing): 198,829

Harvard Pilgrim Health Care, a subsidiary of Point32Health, disclosed a ransomware incident discovered on April 17, 2023, affecting systems used to service clients including UnitedHealthcare. The breach impacted data from March 28 to April 17, 2023, involving names, SSNs, DOBs, and clinical information. Approximately 22,365 Rhode Island residents were identified as potentially affected. The company took systems offline, engaged forensic experts, and offered two years of credit monitoring.

Affected (this filing): 22,365

Harvard Pilgrim Health Care reported a ransomware incident discovered on April 17, 2023, affecting systems used to service clients including UnitedHealthcare. Unauthorized access occurred between March 28 and April 17, 2023, resulting in data exfiltration. The files contained personal and protected health information. The company engaged forensic experts, notified law enforcement, and implemented additional cybersecurity safeguards. Credit monitoring services were offered to affected individuals.

Harvard Pilgrim Health Care experienced a ransomware incident affecting systems used to service clients, including UnitedHealthcare. Unauthorized access occurred between March 28, 2023, and April 17, 2023, with discovery on April 17, 2023. Data exfiltrated included names, addresses, SSNs, health insurance account info, and clinical information. Systems were taken offline, and forensic experts were engaged. Credit monitoring is offered.

Harvard Pilgrim Health Care reported a data breach affecting 2,550,922 individuals, including 875 Maine residents. The breach, discovered on April 17, 2023, occurred on March 28, 2023, and was described as an external system breach or hacking incident. The compromised information included names and Social Security numbers. Affected individuals were notified on August 25, 2023, and offered 24 months of credit monitoring services through IDX.

Affected (this filing): 2,550,922

Harvard Pilgrim Health Care disclosed a ransomware incident discovered on April 17, 2023, affecting systems used for client services. Data copied between March 28 and April 17, 2023, included PII and PHI (names, SSNs, DOBs, clinical info). The company took systems offline, engaged forensic experts, and offered 2 years of credit monitoring. Approximately 22,365 Rhode Island residents were identified as impacted.

Affected (this filing): 22,365