Skip to content

Major Mass. health insurance provider says customer data was ‘copied and taken’ in cyberattack

Posted in :


A pair of major Massachusetts and New Hampshire health insurance companies are warning subscribers that a cybersecurity ransomware incident in March and April has compromised some members’ personal information.

Point32Health, the corporate parent of Harvard Pilgrim Health Care and Tufts Health Plan, said in April that the threat impacted systems that are used to service customers, accounts, brokers, and providers, officials said. It proactively took certain systems offline to contain the threat out of an “abundance of caution” after “detecting an unauthorized party.”

“Unfortunately, the investigation identified signs that data was copied and taken from our Harvard Pilgrim systems from March 28, 2023, to April 17, 2023. We want to assure you that we are taking this incident extremely seriously, and we deeply regret any inconvenience this incident may cause,” Point32Health said in a statement.

Harvard Pilgrim determined that the files at issue may contain the following types of personal information and/or protected health information: names, physical addresses, phone numbers, dates of birth, health insurance account information, Social Security numbers, provider taxpayer-identification numbers, and clinical information, Point32Health said in a statement.

At this point, the Harvard Pilgrim is not aware of any misuse of personal information and protected health information as a result of this incident, but still has begun notifying potentially affected individuals to provide them with more information and resources,” Point32Health added in a statement.

Harvard Pilgrim has established a dedicated call center for potentially impacted individuals to enroll in complimentary credit monitoring and identity theft protection services.

If you have any questions regarding this incident, please contact the dedicated assistance line, which can be reached at 888-220-5517.

“Harvard Pilgrim continues to take steps to implement additional data security enhancements and safeguards to better protect against similar events in the future,” said Point32Health.

Harvard Pilgrim Health Care and Tufts Health Plan merged in January 2021 under the name Point32Health.

This is a developing story. Check back for updates as more information becomes available.

Download the FREE Boston 25 News app for breaking news alerts.

Follow Boston 25 News on Facebook and Twitter. | Watch Boston 25 News NOW