Information Regarding a HIPAA Breach with Business Partner

Date: 06/17/21

Allwell from Superior HealthPlan is committed to protecting the privacy and security of our members’ information. On January 25, 2021, one of our vendors, Accellion, informed us that it was the victim of a cyber-attack that compromised its file transfer platform, and allowed a malicious party to view or download data files from January 7 to January 20, 2021. On April 2, 2021, our investigation identified that the personal information of Allwell members was involved in this incident. We have mailed a letter and provided resources to all members whose information was involved in this incident.

The personal information involved in this incident includes name, and one or more of following: address, date of birth, insurance ID number, health information such as medical condition(s) and treatment information.

We have no indications of inappropriate use of members’ information. However, out of an abundance of caution we recommend that potentially affected members take reasonable steps to ensure the security of their information.

We are providing members affected by this incident with one-year of free credit monitoring and identity theft protection services. Instructions on how to enroll in this service were included in the letter sent to affected individuals.

We have also shared a reference guide of recommendations from the Federal Trade Commission regarding identity theft including information on how to request free credit reports, security freezes and fraud alerts.

Upon discovering this incident, we took the following actions to correct this issue and prevent it from reoccurring:

• We immediately conducted an investigation into the incident and ceased using Accellion’s services.
• We have reviewed our file transfer processes and tools to ensure that they are not at risk of a similar attack.
• We have removed all of our data files from Accellion’s systems.

Accellion is coordinating their response with the appropriate law enforcement authorities.

Allwell takes the responsibility of protecting our members’ personal information very seriously. We sincerely regret any concern or inconvenience this incident may have caused our members and their families. If you have any questions, or would like additional information, please call Allwell Member Services at 1-844-796-6811 (HMO), 1-877-935-8023 (HMO SNP) (TTY: 711). From October 1 to March 31, you can call us 7 days a week from 8 a.m. to 8 p.m. From April 1 to September 30, you can call us Monday through Friday from 8 a.m. to 8 p.m. A messaging system is used after hours, weekends, and on federal holidays.

Y0020_SHP_20217873A_C