UnitedHealthcare Data Breach Impacts Members’ Personal Information in Arizona and Chicago

• Some individuals enrolled in UnitedHealthcare health plans in Arizona and Chicago were affected by the data breach.
• UnitedHealthcare is offering two years of free “LifeLock® Identity Theft Protection Services” to help affected individuals detect any possible misuse of their personal information.

UnitedHealthcare, a leading health insurance company, announced on Friday that it has suffered a data breach in which some of its members’ personal information was exposed. According to the available data, the UnitedHealthcare data breach impacted some individuals in Arizona and Chicago who were enrolled in the company’s health plans.

According to UnitedHealthcare, the breach took place between February 19, 2023, and February 25, 2023, and affected the personal information of some of its members. The company determined on April 10, 2023, that personal information such as first and last names, health insurance member ID numbers, dates of birth, addresses, dates of service, provider names, claim information, and group names and numbers may have been impacted.

However, the company confirmed that the breach did not involve Social Security numbers or driver’s license numbers. UnitedHealthcare has already started notifying affected individuals directly by mail, with notifications beginning on April 28, 2023.

Upon discovering the breach, UnitedHealthcare acted swiftly to investigate and took immediate measures to prevent further unauthorized access. The company locked the portal account for members and initiated a forced password reset. During the investigation, UnitedHealthcare determined that the mobile application was the target of a credential-stuffing attack. However, the company stated that there was no evidence that member login credentials used during the attack were accessed or obtained from any UnitedHealthcare system.

To help affected individuals detect any possible misuse of their personal information, UnitedHealthcare is offering two years of free “LifeLock® Identity Theft Protection Services.” This service includes proactive identity theft protection, identity theft alerts, address change verification, annual copies of members’ credit reports from all three national credit bureaus, and comprehensive recovery services if a member becomes a victim of identity theft during their LifeLock membership.

UnitedHealthcare said in a statement that it regrets the incident and any inconvenience or concern it may cause. Anyone with further questions regarding this matter can contact the company’s customer service line at (800) 669-1812 from 8:00 a.m. – 5:00 p.m. Central Time, Monday – Friday.

Reference(s)
https://www.kold.com/2023/04/28/unitedhealthcare-data-breach-arizona/
https://www.cbsnews.com/chicago/news/unitedhealthcare-members-information-data-breach/