On June 18, 2024, Kairos Health Arizona (“Kairos “) filed a notice of data breach with the Attorney General of Montana after discovering that a cybersecurity incident resulted in some members’ personal information being leaked. In this notice, Kairos explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, insurance identification numbers, claims and coverage information, and health information. Upon completing its investigation, Kairos began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Kairos Health Arizona, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Kairos Health Arizona data breach. For more information, please see our recent piece on the topic here.

What Caused the Kairos Health Arizona Data Breach?

The Kairos Health Arizona data breach was only recently announced, and more information is expected in the near future. However, Kairos’s filing with the Attorney General of Montana provides some important information on what led up to the breach. According to this source, Kairos recently learned that a former third-party vendor accessed the company’s IT network without permission. In response, Kairos launched an investigation to learn more about the incident and determine what, if any, consumer information was subject to unauthorized access.

The Kairos investigation confirmed that the vendor accessed and downloaded a limited amount of data from a Kairos database between November 2, 2023 and March 29, 2024. It was later determined that certain files containing confidential consumer information were among those accessible to the unauthorized party.

After learning that sensitive consumer data was accessible to an unauthorized party, Kairos Health Arizona reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, insurance identification number, claims and coverage information, and health information.

On June 18, 2024, Kairos Health Arizona sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Kairos Health Arizona

Kairos Health Arizona is an employee benefits pool that serves public entities in Arizona, such as school districts and municipalities. Kairos offers plans and administrative services targeting small employers and self-employed individuals. Kairos Health Arizona employs more than 25 people and generates approximately $5 million in annual revenue.