Health Plans, Inc., (“HPI”) is providing notice of a data security incident experienced by our subcontractor that may affect the privacy of certain individuals’ protected health information and/or personal information. We are not aware of any misuse of personal information or protected health information as a result of this incident.

Harvard Pilgrim Health Care, a subsidiary of Point32Health, is a subcontractor of HPI, and they provide services to support the administration of health plans offered by HPI, which include claims pricing for Harvard Pilgrim Health Care, Inc. provider networks, provider eligibility validation, and fraud, waste and abuse analysis. On April 17, 2023, Point32Health discovered it was the victim of a cybersecurity ransomware incident that impacted systems used to service their clients, including HPI. Point32Health is working with third-party cybersecurity experts to conduct a thorough investigation into this incident and remediate the situation.

Unfortunately, the investigation identified signs that files were copied and taken from Point32Health systems from March 28, 2023, to April 17, 2023. On May 17, 2023, Point32Health determined that files may contain personal information and/or protected health information of current and former HPI subscribers and dependents. The investigation revealed that the following information could potentially be in the files at issue: name, physical address(es), phone number(s), date of birth, health insurance account information, Social Security number, and clinical information (e.g., medical history, diagnoses, treatment, dates of service, and provider names).

To more proactively support our health plan members, a dedicated call center has been established for individuals to contact with questions or concerns, and complimentary credit monitoring and identity theft protection services are being provided to the HPI members that are impacted by this incident. For more information, or if you have any questions regarding this incident, please visit Harvard Pilgrim’s website here or contact the dedicated assistance line, which can be reached at (888) 220-5517 (toll free), Monday through Friday from 9:00 am to 9:00 pm Eastern time, excluding U.S. holidays.

The security of your protected health information is a top priority for us. We sincerely regret any concern this incident may cause you.