On April 17, 2023, Point32Health posted a “system update” on its website after learning that the company had been the recent target of a ransomware attack. While the company’s investigation is still ongoing, it is possible that the hackers were able to successfully access and steal confidential consumer data from Point32Health’s computer network. If the company’s investigation confirms that consumer data was leaked, Point32Health will be required to send out data breach notification letters to all individuals who were impacted by the ransomware attack.

If you receive a data breach notification from Point32Health, it is essential you understand what is at risk and what you can do about it. As we’ve previously discussed in other posts, once hackers steal your information, they can then use it to commit all types of fraud against you—including identity theft. However, there are steps you can take to limit your risks as well as to hold a company that negligently leaked your data financially responsible. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the Point32Health data breach, reach out to a data breach attorney.

What We Know So Far About the Point32Health Breach

News of the Point32Health data breach is still fresh; however, what we know at this point comes from a “system update” that the company added to its website in mid-April. Evidently, on April 17, Point32Health determined that the company was the victim of a ransomware attack. The cyberattack impacted systems that Point32health uses to serve members, accounts, brokers and providers. At this early stage in the investigation, Point32Health believes that the company’s Harvard Pilgrim Health Care business was primarily impacted.

As Point32health continues to investigate the incident with the assistance of third-party data security specialists, it is also trying to bring its network back online to continue serving customers.

When Point32Health completes its investigation, the company will be required to provide notice to anyone whose sensitive information was leaked as a result of the recent ransomware attack. These data breach letters will provide victims with important information regarding the specific data types that were leaked, when the period of unauthorized access began and ended, and what the company did after learning about the attack to prevent future cyberattacks.

More Information About Point32Health

Point32Health is a health and well-being company based in Canton, Massachusetts. The company operates several major health plans, including Tufts Health Plan and Harvard Pilgrim Health Care, CarePartners of Connecticut, as well as the Harvard Pilgrim Health Care Institute’s Department of Population Medicine, Integra Partners, Health Plans, Inc., TrestleTree and MedWatch. Point32Health employs more than 1,100 people and generates approximately $9.4 billion in annual revenue.