PH TECH has informed affected customers of a security incident with vendor Progress MOVEit involving member information.
On June 02, 2023, PH TECH was told that Progress MOVEit, a company that works on making sure electronic files are transferred securely, had a problem that could allow attackers to access their system and download files. When we learned about this, PH TECH immediately moved our system offline and began an investigation to figure out if our systems were affected. PH TECH hired a cybersecurity firm to help with the investigation and also informed the Federal Bureau of Investigation (FBI).
From the investigation, we found out that an unauthorized person used the Progress MOVEit’s software and that PH TECH data files were downloaded. The incident happened on May 30, 2023, and PH TECH found out on June 16, 2023, that data it protects for some of its customers had been affected. Those customers were told the news that same day.
Some personal information and some protected health information was accessed from things like enrollment, authorization, and claims files. The information varies from person to person and might include name, date of birth, social security number (SSN), address, member ID number, plan ID number, email address, authorization information, diagnosis code, procedure code, and claim information.
PH TECH did several things to address this incident. First, we disabled access to the platform. Then, we fixed the problem and rebuilt how people can access the platform to make sure no one else can get unauthorized access to files through the Progress MOVEit software.
We have also notified individuals that have been affected by this incident and are offering them free identity theft protection services through IDX.
If you have been affected by this incident or want to figure out if you were, please contact IDX. Their representatives are aware of the incident and can answer your questions or concerns. If you have been affected, you can also sign up for free IDX services by using the same contact information. The deadline to enroll is January 30, 2024.
Visit https://response.idx.us/PHTECH or call IDX at (888) 498-1602, TTY/TDD 711, Monday through Friday from 6 a.m. - 6 p.m. Pacific Time.