Oregon Health Plan Data Breach Exposes 1.7 Million Patients To Identity Theft Featured
MOVEit Transfer ransomware attack at Oregon Health’s data management services provider jeopardizes another 1.7 million patient identities.
The Oregon Health Authority has disclosed that 1.7 million Oregon Health Plan members had their protected health information compromised following a data breach of its health data management services provider Performance Health Technology (“PH Tech”) stemming from the widespread Cl0p ransomware attack involving the exploitation of a MOVEit Transfer vulnerability,
What information was stolen?
Information obtained by the hack include Oregon residents’ names, birthdates, email and postal addresses, member and plan ID numbers, and Social Security numbers, Cl0p ransomware attackers were also able to obtain plan members’ diagnosis and procedure codes, insurance authorizations, claims data, and other sensitive health information.
What should people do?
Oregon Health Plan is urging members to activate credit monitoring as a precaution and to watch for additional information from PH Tech in the mail and follow instructions to activate 12 months of free identity theft protection. OHP members will be contacted by regular first-class mail, not by phone or email, OHA said.
OHP also recommends plan members request a free credit report. Individuals have the right to request one free copy of their credit report from each of the three major consumer reporting companies (Equifax, TransUnion and Experian) every year. OHP members may be able to request reports from one company every few months throughout the year. Credit reports and monitoring can help people identify signs of identity theft and stop thieves from using information for fraudulent purposes.
OHP members also will be able to receive ID theft recovery services via PH TECH at no cost, if needed, officials said.
What are my legal rights?
Civil lawsuits against breached companies, based on allegations of failing to protect consumer data, are becoming more common. Through these legal actions, consumers affected by a data breach can seek compensation at no upfront cost and with relatively little time commitment required on their part.
To learn about your legal rights, please fill out the form below and a lawyer will contact you at no cost to advise you of your legal rights.