On May 8, 2024, WebTPA Employer Services, LLC (“WebTPA”) filed a notice of data breach with the Attorney General of California after discovering that an unauthorized party was able to access and acquire sensitive information stored on the company’s IT network. In this notice, WebTPA explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information. Upon completing its investigation, WebTPA began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from WebTPA Employer Services, LLC, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the WebTPA Employer Services data breach. For more information, please see our recent piece on the topic here.

What Caused the WebTPA Employer Services Data Breach?

The WebTPA Employer Services data breach was only recently announced, and more information is expected in the near future. However, WebTPA’s filing with the Attorney General of California provides some important information on what led up to the breach. According to this source, on December 28, 2023, WebTPA detected unusual activity within its computer network. In response, WebTPA secured its systems and then launched an investigation with the help of third-party data security experts.

The WebTPA Investigation ultimately confirmed that an unauthorized party was able to access its network between April 18, 2023 and April 23, 2023. During this time, the unauthorized party had access to information provided to WebTPA by various insurance companies.

After learning that sensitive consumer data was accessible to an unauthorized party, WebTPA Employer Services reviewed the compromised files to determine what information was leaked and which consumers were impacted. WebTPA completed this process on March 25, 2024.

On May 8, 2024, WebTPA Employer Services sent out data breach letters to anyone who was affected by the recent data security incident. While the publicly available data breach letter from WebTPA doesn’t mention the specific data types that were compromised, these personalized data breach letters should provide victims with a list of what information belonging to them was compromised.

More Information About WebTPA Employer Services, LLC

WebTPA Employer Services, LLC is a third-party administrator based out of Irving, Texas. WebTPA creates custom health plans for employers that are designed to lower health plan costs while providing competitive benefits. WebTPA also provides administrative services. WebTPA is a wholly owned subsidiary of GuideWell Mutual Holding Corporation. WebTPA Employer Services employs more than 18,000 people and generates approximately $103 million in annual revenue.