Five details:
- Academic HealthPlans, which is contracted with UnitedHealthcare, provides student health insurance plans to universities. The broker began notifying universities and students of a cyberattack that may have resulted in unauthorized access to two Academic HealthPlans employee email accounts and the attachments within the emails, according to a July 20 data breach notification letter.
- The email accounts contained students’ names and personal health information.
- The email accounts had been compromised as a result of phishing attacks launched at the broker from Aug. 6-24, 2020, and again on Oct. 2, 2020.
- The breach was not discovered by Academic HealthPlans until nearly a year later on July 1, according to information UnitedHealthcare provided Maine’s attorney general office.
- The broker launched an investigation, which confirmed the unauthorized access occurred on its cloud and Microsoft Office email network.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
