Dozens of payers and some providers have been affected by a data breach involving printing and mailing services vendor OneTouchPoint.
In a July 27 notice, the vendor said it discovered encrypted files on some of its computer systems in April, and an investigation determined there was unauthorized access to its servers.
OneTouchPoint was unable to determine what information was accessed in its system, but it notified customers June 3 about information that was potentially accessed, including names, member IDs and health assessment information. The company said it found no evidence of misuse of any information.
Though not named in the OneTouchPoint notice, Aetna said it was also affected by the breach.
Payers affected:
- Anthem affiliated covered entities
- Common Ground Healthcare Cooperative (insurance agency)
- Banner Medicare Advantage Dual
- Blue Cross Blue Shield of Arizona
- MediSun d/b/a Blue Cross Blue Shield of Arizona Advantage
- Health Choice Arizona
- Blue Cross Blue Shield of Massachusetts
- Blue Cross Blue Shield of Rhode Island
- Blue Cross Blue Shield of South Carolina Commercial
- BMC HealthNet Plan/Well Sense Health Plan
- CareFirst Advantage
- Commonwealth Care Alliance
- ElderPlan/HomeFirst
- EmblemHealth Plan
- Florida Blue
- Geisinger
- Health Alliance Plan of Michigan
- HAP Midwest Health Plan
- Health First
- Health New England
- Health Plan of San Mateo
- HealthPartners
- Highmark Health
- Humana
- Kaiser Permanente
- KS Plan Administrators
- MVP Health Care
- Pacific Source
- Premera Blue Cross Medicare Advantage Plans
- Prime Time Health Plan
- Point32Health
- Regence BlueCross BlueShield of Oregon
- Regence BlueCross BlueShield of Utah
- Regence BlueShield
- Regence BlueShield of Idaho
- UPMC Health Plan
- Matrix Medical Network