Trusteed Plans Service Corporation reports data breach affecting nearly 20,000 people
Learn More
Trusteed Plans Service Corporation, a third-party administrator of self-insured medical plans, is reporting a cybersecurity incident that compromised sensitive personal and health information of 19,775 individuals.
TPSC detected unusual activity in its computer environment on December 26, 2024, and launched an investigation, disconnected all network access and changed administrative credentials. The forensic investigation confirmed that hackers potentially stole sensitive personal information and protected health information.
The exposed data includes:
- Full names
- Physical addresses
- Dates of birth
- Social Security numbers
- Health insurance identification numbers
- Health plan information
- Claims information
- Medical treatment information
- Medical diagnosis information
- Medical procedure information
- Medicare/Medicaid identification numbers
The nature of the attack is not disclosed. The reason for the nearly 10 month delay in notification is not clear.
TPSC began mailing data breach notification letters to all 19,775 affected individuals on September 15, 2025. The company is offering complimentary credit monitoring and identity protection services.
Multiple law firms specializing in data breach class action litigation have announced investigations into potential claims against TPSC related to this incident.
