Point32Health informs that after Harvard Pilgrim ransomware attack patient data stolen
Take action: Ransomware hurts you more than once - first by blocking your operations, causing you direct loss of business and financial harm and subsequently by stealing your data, causing loss of trust and significant monetary, legal and reputational harm as you operate in a world where your data is stolen.
Learn More
Point32Health, the second-largest health insurer in Massachusetts, has reported that patient information was stolen during a data breach that has significantly affected the company for several weeks.
The parent company of Tufts Health Plan and Harvard Pilgrim Health Care announced on Tuesday that cyber criminals likely copied and obtained data from Harvard Pilgrim's systems between March 28 and April 17.
Point32Health has initiated the process of notifying subscribers that their information may have been compromised.
The stolen data may include personal/protected information like includes names, physical addresses, phone numbers, dates of birth, health insurance account information, Social Security numbers, provider taxpayer identification numbers, and clinical information such as medical history, diagnoses, treatment, dates of service, and provider names.
The exact number of affected individuals is still unknown.
Point32Health has started notifying potentially affected individuals and is offering complimentary identity protection, two years of credit monitoring services, and a website for enrollment.
The financial implications of the breach are uncertain, but the company has experienced prolonged service disruptions, affecting claims processing, prior authorization requests, and access to insurance coverage for some members. Healthcare providers are facing delays in receiving payments, causing financial strain.
