Published
June 10, 2023
If you are a Harvard Pilgrim Health Care plan member or patient, your data may have been taken in a ransomware attack affecting more than 2.5 million people — here is what to do.
What is the Harvard Pilgrim Health Care Data Breach About?
Harvard Pilgrim Health Care is a healthcare service organization based in Canton, Massachusetts. Recently, Harvard Pilgrim Health Care notified the U.S. Department of Health and Human Services that data had been stolen from their internal systems in March and April of 2023. This breach by an unauthorized third party compromised the personal information of more than 2.5 million individuals. Harvard Pilgrim Health Care issued an office notice about the data breach on their website.The notice informed patients and individuals that their data may have been copied and taken from Harvard Pilgrim Health Care systems. This was after an internal investigation was conducted, where it was concluded this may have been a ransomware attack that occurred on or around April 17, 2023. The data accessed includes but is not limited to the following leaked information:
• Patients' names
• Social Security Numbers,
• Personal Phone Numbers,
• Protected Health Information,
• Health Insurance Data,
• Other PII (Personally Identifiable Information)
Status
Active Investigation
Attorneys are reviewing claims · no settlement fund approved yet
People Affected
2.5 million+
individuals whose information was reportedly copied in the attack
Estimated Payout
Varies
depends on any future settlement and your documented losses
Proof Required
Yes
the data breach notice letter from Harvard Pilgrim Health Care
What is Ransomware?
Imagine you're the guardian of a digital fortress. One day, a group of malicious hackers, armed with cunning tactics, infiltrate your fortress and take your digital treasures hostage. They do this by encrypting your precious files and locking you out of accessing them. Just like a skilled kidnapper, they demand a hefty ransom from you in exchange for the safe return of your files.This virtual kidnapping scenario is what we call ransomware. It's a type of malicious software designed to encrypt or lock down files on a victim's computer or network, rendering them inaccessible. The hackers then demand a ransom, usually in the form of cryptocurrency, in exchange for providing the decryption key or unlocking the files.
Ransomware can spread through various means, including phishing emails, compromised websites, or even exploiting software vulnerabilities. It's like a digital predator lurking in the shadows, ready to strike unsuspecting victims.
What Were The Biggest Ransomware Attacks in History?
JBS: In June 2021, JBS, one of the world's largest meat processors, suffered a ransomware attack. The REvil ransomware group was identified as the perpetrator. The attack resulted in the temporary shutdown of JBS's operations in North America and Australia, impacting meat supplies and causing concerns in the food industry. JBS was also the center of a recent open class action settlement.WannaCry: In May 2017, the WannaCry ransomware spread globally, infecting hundreds of thousands of computers in over 150 countries. It targeted computers running Microsoft Windows operating systems, encrypting files and demanding ransom payments in Bitcoin. WannaCry affected organizations such as the UK's National Health Service (NHS), causing widespread disruption to healthcare services.
NotPetya: NotPetya, which emerged in June 2017, initially masqueraded as a variant of the Petya ransomware. However, it was later revealed to be a more destructive malware aimed at causing disruption rather than generating ransom payments. NotPetya affected numerous organizations worldwide, including shipping giant Maersk, pharmaceutical company Merck, and Ukraine's government institutions.
Colonial Pipeline In May 2021, the Colonial Pipeline, a major fuel pipeline system in the United States, fell victim to a ransomware attack. The DarkSide ransomware gang was responsible for the attack, which led to the shutdown of the pipeline for several days. The incident caused fuel shortages and price increases along the East Coast of the United States.
Kaseya: In July 2021, a supply chain attack targeting the software provider Kaseya impacted numerous managed service providers (MSPs) and their clients. The REvil ransomware gang exploited a vulnerability in Kaseya's software, leading to the encryption of files on the networks of affected organizations. This attack affected thousands of businesses worldwide.
What makes ransomware particularly intriguing is its ever-evolving nature. Hackers constantly develop new techniques, refining their methods to outsmart cybersecurity measures. They adapt their tactics, creating unique strains of ransomware with captivating names like CryptoLocker, WannaCry, or NotPetya, making them sound like characters from a cyberpunk novel.
Ransomware attacks have targeted individuals, businesses, hospitals, and even government institutions, causing financial losses, disruption of services, and significant headaches for victims. The cat-and-mouse game between cyber-criminals and cybersecurity experts continues as they battle to protect the digital world from these digital hostage-takers.
You can find a curated list of data breaches published by the United States Department of Health and Human Services. These data breaches include events that impacted at least 500 people, and were reported, which impacted protected health information of those individuals. The U.S. government is required, by law, to update this list of medical information-related data breaches.
How Do I Qualify for Compensation?
If you received a letter from Harvard Pilgrim Health Care notifying you that your personal information was impacted in their data breach, use the links below in order to find out if you may be eligible for compensation!Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
For more open class actions keep scrolling below.
Status
Active Investigation
No settlement fund approved · attorneys reviewing claims
Company Investigated
Harvard Pilgrim Health Care
Location
Canton, Massachusetts
People Affected
2.5 million+
Incident Window
March – April 2023
reported ransomware attack on or around April 17, 2023
Type
Data Breach Investigation · Ransomware
Proof Required
Yes
data breach notice letter
