Who: Harvard Pilgrim Health Care, a New England health insurance firm, disclosed that a ransomware attack last spring affected a larger number of individuals than initially reported.
What: The ransomware attack, carried out by an unidentified group on April 17, 2023, impacted Harvard Pilgrim's operations for several days. The latest breach notification submitted to regulators in Maine revised the total number of affected individuals to 2,860,795, a 12% increase from the original count.
Impact: The incident underscores how data breach investigations can lead to a reassessment of the number of affected individuals. Personal data and protected health information of current and former subscribers, dependents, and contracted providers were potentially compromised. Harvard Pilgrim serves over 1.1 million members across Massachusetts, New Hampshire, Maine, and Connecticut. The attack occurred during a period of infiltration from March 28, 2023, to April 17, 2023. The company collaborated with federal law enforcement and cybersecurity firms to address the breach.
Read the full article HERE