Multiple lawsuits accuse Harvard Pilgrim Health Care and its parent company, Point32Health, of “intentionally failing” to fulfill its responsibility to protect personally identifiable information and protected health information.
WHY IT IMPORTANT
Lawyers for Valeria Salerno Gonzales, a member of the HPHC, filed a four-count, 32-page lawsuit for a jury trial against HPHC and Point32Health in a Massachusetts court alleging damages. and future losses to more than 2.5 million members of the health insurer, according to a report Tuesday in Harvard crimson.
Salerno Gonzalez sues Harvard Pilgrim Health Care Inc. and others accused the HPHC of a “reckless and extremely negligent” approach to foreseeable risks and known threats.
“As an approximate and foreseeable result of Respondent’s gross negligence, plaintiff and class members have suffered damage and are at imminent risk of additional harm and damage. supplement,” the lawsuit states.
Additional lawsuits allege HPHC violated the HIPAA Privacy Rule, HIPAA Magazine report.
Tracie Wilson sues Harvard Pilgrim Health Care, Inc. and Point32Health, Inc. Allegations of partial damages are based on delay – the time it takes defendants to detect and report violations.
According to the story, the plaintiff reported an increase in spam texts and calls after the breach, as well as anxiety, stress, sleep disruption, and fear.
On June 8, Point32Health posted a system update stating that providers should continue to care for HPHC members and that those services should be covered.
Kathleen Makela, a spokeswoman for Point32Health, said in a statement to the Harvard University publication: “We have made significant progress in bringing our systems back online and processing transactions. different business.
According to the report, she noted that information sharing with partners has resumed and many other core functions will be back online in the coming weeks.
“Our primary focus during recovery is to ensure our members and clients get the care and services they need as quickly and safely as possible.”
HPHC, founded by a former dean of Harvard Medical School, is not part of Harvard University, the university crimson speak.
In 2000, when the insurance company began claiming rights with former Massachusetts Governor Charlie Baker as the recipient, the state sued the university to keep the Harvard name. Point32Health was formed when HPHC merged with Tufts Health Plan in 2021.
TREND TO BIGGER
In May, Point32Health confirmed a health data breach involving HPHC – data that was copied and retrieved from healthcare payer systems in a cyber attack that occurred on May 28. 3 to 17 April.
HPHC, which has members in Massachusetts, New Hampshire, Maine and Connecticut, said the leaked data could include names, physical addresses, phone numbers, dates of birth, health insurance account information, numbers, and phone numbers. Social Security, provider taxpayer identification number, and medical examination information.
While providers are a target for cybercriminals, cybersecurity experts have called on the entire healthcare ecosystem — including payers and pharmaceuticals — to work together, according to Greg. Conti, Kopidion’s principal and Black Hat coach for nearly nine years.
“Detecting and mitigating attacks early in the kill chain can stop attacks before we feel the impact,” he said. Healthcare IT News.
“Sharing threat intelligence and creating visibility and situational awareness for not just an individual company but the entire healthcare industry will allow you to foresee attacker activity and take appropriate measures.”
ON PROFILE
“Our system recovery efforts are focused on priority areas of the business, such as eligibility and enrollment; continuity of care, usage management, and authorization. advance; payment to suppliers; medical and behavioral health claims handling; sales and renewals and the rest of the business functions,” Makela said in a statement.
Andrea Fox is the senior editor of Healthcare IT News.
Email: [email protected]
Healthcare IT News is a publication of HIMSS Media.
