Quintilone & Associates is currently investigating the Hartland, Wisconsin-based OneTouchPoint, Inc. (“OTP”), a printing and mailing company that provides services to various healthcare providers, for failing to safeguard sensitive patient information in a data breach that occurred in April 2022. The incident happened when the company discovered suspicious activity on its computer systems. An investigation into the attack found that an unauthorized actor had gained access to files that contained patient names, member ID numbers, and information provided during patients’ health assessments. So far from other sources, we are aware of the affected healthcare practices affected by the data breach at OTP include, but are not limited to:
- Anthem Affiliated Covered Entities
- Common Ground Healthcare Cooperative
- Banner Medicare Advantage Dual
- Blue Cross Blue Shield of Arizona
- MediSun, Inc. d/b/a Blue Cross Blue Shield of Arizona Advantage
- Health Choice Arizona, Inc
- Blue Cross Blue Shield of Massachusetts
- Blue Cross Blue Shield of Rhode Island
- Blue Cross Blue Shield of South Carolina Commercial
- BMC HealthNet Plan / Well Sense Health Plan
- CareFirst Advantage
- Commonwealth Care Alliance
- ElderPlan/HomeFirst
- EmblemHealth Plan, Inc.
- Florida Blue
- Geisinger
- Health Alliance Plan of Michigan
- HAP Midwest Health Plan
- Health First
- Health New England
- Health Plan of San Mateo
- HealthPartners
- Highmark Health
- Humana
- Kaiser Permanente
- KS Plan Administrators, LLC
- MVP Health Care
- Pacific Source
- Premera Blue Cross Medicare Advantage Plans
- Prime Time Health Plan
- Point32Health
- Regence BlueCross BlueShield of Oregon
- Regence BlueCross BlueShield of Utah
- Regence BlueShield
- Regence BlueShield of Idaho, Inc.
- UPMC Health Plan
- Matrix Medical Network
OTP investigated the incident and sent notification letters to affected individuals, the company noted that the breach occurred in April 2022. Due to the lapse in time between the breach and the company’s notice to affected practices, internet hackers, scam artists, criminals with internet access, and other malcontents may have already been able to acquire and sell patient information such as social security numbers, date of birth, and addresses. In previous data breaches, victims of data theft have spent money on credit monitoring services or paying off illegal loans, credit cards opened in their name or other charges. Some individuals affected by the data breach may have noticed one or more of the following types of activity (1) unrecognized credit card charges, (2) new unknown loans (3) requests for government services like welfare or other services (4) medical procedures ordered without patient consent, or (5) a disrupted use of a patient portal to the care provider. As an example see
Have you recently received a data breach notification letter from OneTouchPoint, Inc.?
If so, we would like to hear from you. Please complete the contact form on this page, send us an email at req@quintlaw.com, or give us a call at 949.458.9675