6.1.2023 Harvard Pilgrim Health Care Ransomware Incident Update
The following are the latest updates from Harvard Pilgrim Health Care (HPHC) regarding notifications being sent to employers and members:
Credit Monitoring & Identity Theft Protection Services: These complimentary services remain available to all current and former Harvard Pilgrim Commercial members (since March 28, 2012). HPHC encourages any current or former HPHC member with concerns to enroll in these credit monitoring and identity theft protection services.
Written Member Notifications: The initial required notification was delivered through the public website, harvardpilgrim.org/data-security-incident, and allowed HPHC to offer credit monitoring and identity theft protection services to health plan members while the investigation continues.
While these investigations often take time to fully complete and sometimes only reveal limited additional information, the investigation is progressing and by June 15, 2023 HPHC will begin the process of mailing written notifications to all current and former health plan subscribers and dependents including former members of employer groups no longer active with Harvard Pilgrim, dating back to March 28, 2012 for whom there is up to date contact information. Those individuals for whom there is no up to date contact information will be notified through the previously mentioned notice on the public website consistent with the substitute notice requirement set forth in the Health Insurance Portability and Accountability Act (HIPAA) Breach Notification Rule.
This written notification will provide a summary of what happened, a description of the types of data impacted, information on how to obtain complimentary credit monitoring and identity theft protection services, and details on how to protect their personal data. This is the next step in the notification process.
Employer Communications: Our employer groups will continue to receive direct updates on all system recovery and restoration details.
Future Updates & Resources: Please continue to use our website point32health.org/systemupdate to view all notices, updates and frequently asked questions (FAQs).