Letters are being sent to 1,430 Arkansas Blue Cross and Blue Shield and Health Advantage members who may be affected by a cyberattack on one of its vendors, NBC affiliate KARK reported June 28.
The attack occurred at OneTouchPoint, a printing-mailing vendor for Matrix Medical Network, which provided member services for Arkansas Blue Cross and Health Advantage, according to the report. OneTouchPoint had members' personal information in their computer files, which may have been exposed.
Arkansas Blue Cross and Blue Shield said the attack did not involve its computers or records, or those of Health Advantage, according to the report. The payer said Social Security numbers of members were not in the file system involved in the cyberattack, which accessed member names, addresses, birth dates, healthcare provider names and medical information.
The letters being sent by the payer will provide instructions on how to sign up for 12 months of free identity theft detection and resolution and credit monitoring services, according to the report.
OneTouchPoint said it is continuing to investigate the incident with the help of a forensic specialist to determine the nature and scope of the attack, according to the report. No unauthorized use of stolen information has been reported, it said.