Massachusetts Health Insurer Point32Health Reports Data Breach After Cyberattack

Point32Health, the parent company of Harvard Pilgrim Health Care and Tufts Health Plan, has warned subscribers that a cybersecurity ransomware incident in March and April has compromised some members' personal information. The incident affected systems used to service customers, accounts, brokers, and providers, and some systems were taken offline to contain the threat. The files at issue may contain personal information and/or protected health information belonging to current and former subscribers and dependents and current contracted providers, including names, physical addresses, phone numbers, dates of birth, health insurance account information, Social Security numbers, provider taxpayer identification numbers, and clinical information. Harvard Pilgrim is offering identity protection and two years of credit monitoring to impacted patients.