06/14/2023
What Are Good First Steps for Mainers After A Healthcare Data Breach
If you are a Mainer, including for Medicare Gap coverage, and you have or had Harvard Pilgrim as your healthcare provider, check this out: Your personal information, - including social security number, Medicare number, date of birth, address, possibly email address and telephone number, and your medical information- may have been "infiltrated", a fancy word that means that HPHC's computer security, whatever that security was, didn't keep your sensitive info from being hacked between March 28th and April 17th. For those on "autopay", I'm not sure whether our autopay financial information might have been accessed. Hopefully it was encrypted sufficiently to be safe. It's a good question, though. Harvard Pilgrim hasn't provided me yet with a written list of all my personal data that was taken-but I have asked for a written list...
FIRST STEPS according to Harvard Pilgrim's NOTICE:
"Harvard Pilgrim has established a dedicated call center for individuals to contact with questions or concerns and for potentially impacted individuals to enroll in complimentary credit monitoring and identity theft protection services. If you have any questions regarding this incident, please contact the dedicated assistance line at IDX, which can be reached at 888-220-5517 (toll free), Monday through Friday from 9:00 AM to 9:00 PM ET, excluding U.S. holidays. If members have any questions about other issues unrelated to this ransomware incident or are being denied care, please call the number on the back of your Harvard Pilgrim member ID card for assistance."
Two class action lawsuits have already been filed in federal court in Massachusetts, one of them by a New Hampshire plaintiff.
But the first step is to limit your personal damage to credit and identity. More on this later. And please email me (a Harvard Pilgrim member who was affected too) at [email protected] if you would like to chat about this. Stay safe, Alison Briggs, Esq.
An investigation is ongoing, though the company said it is not aware of any information taken from the breach being used.