Affinity Legacy, Inc. Confirms Data Breach Affected Former Medicare Customers
NEW YORK–(BUSINESS WIRE)–Affinity Legacy, Inc. (formerly known as Affinity Health Plan, Inc.) has confirmed that it recently was informed that a data breach at a former third party vendor resulted in the theft of the personal information of 5,538 former Medicare Advantage members. Importantly, none of Affinity’s systems were impacted by this incident.
Individuals impacted were either former members of Affinity’s Medicare Advantage Plan prior to 2019, or following 2019, members of an EmblemHealth Medicare Advantage Plan.
The third party vendor provided claims processing services to Affinity Health Plan prior to 2019. As part of those services, the third party received personal health information regarding Medicare members. On June 21, 2023, the vendor determined that an unauthorized party had accessed and downloaded certain files from its MOVEit Secure File Transfer server between May 30 and June 2, 2023. After a thorough investigation, the vendor confirmed that files containing member’s personal health information were impacted by this incident. While the breached personal information varies by individual member, it may include name, mailing address, date of birth, social security number, Medicare number and /or medical diagnoses codes.
MOVEit is a widely used software for transferring files among companies. According to publicly available information, it is believed that the attack impacted over tens of millions of individuals and 2,000+ organizations across many industries worldwide.
Affinity has worked with the third party vendor to understand the breach and is mailing personalized notices to all affected members. Notices explain in more detail what happened and contain personalized information on the exact data breached for each member. Additionally, notice recipients are provided information on how to access complimentary Personal Identity and Privacy Protection through a national leader in data breach response services.
For more information about this incident, please visit our website: www.affinitylegacy.org
About Affinity Legacy, Inc.
Affinity Legacy, Inc., formerly known as Affinity Health Plan, Inc., operates as a not-for-profit organization based in the Bronx, New York. Building on a storied, multi-decade history of addressing the health care needs of underserved individuals, families and communities, Affinity Legacy’s mission is now manifested through grants made to community-based organizations serving the residents of New York City, Nassau, Suffolk, Westchester, Rockland and Orange Counties. For more information, visit affinitylegacy.org.
Contacts
Clara Hansen, [email protected]
