Health Plans Inc. Discloses Data Breach Linked to Vendor Alegeus, Exposing Sensitive Health and Personal Information
Health Plans Inc., a third-party administrator specializing in self-funded employee health benefit plans, has reported a data breach tied to its vendor, Alegeus, a benefits administration technology provider. The incident, disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on September 25, 2026, may have compromised personal health information (PHI) and Social Security numbers of affected individuals.
Health Plans Inc. serves a diverse client base, including hospitals, manufacturing firms, labor unions, municipalities, credit unions, and retail food chains, managing services such as claims processing, enrollment, and prescription drug programs. While details on the timeline, attack vector, and discovery date remain undisclosed in public filings, the breach has raised concerns over the security of sensitive employee data.
In response, Health Plans Inc. has notified impacted individuals, urging them to monitor account activity and report suspicious transactions. As part of its remediation efforts, the company is providing two years of complimentary credit monitoring and identity protection services through IDX, with enrollment codes included in notification letters. A dedicated customer service line has also been established for affected individuals seeking assistance.
The full scope of the breach and its potential long-term impact on affected parties are still under review.
Source: https://www.claimdepot.com/data-breach/health-plans-inc-2026
Alegeus cybersecurity rating report: https://www.rankiteo.com/company/alegeus-technologies
"id": "ALE1791304840",
"linkid": "alegeus-technologies",
"type": "Breach",
"date": "9/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Hospitals, manufacturing firms, '
'labor unions, municipalities, '
'credit unions, retail food '
'chains',
'industry': 'Health benefits administration',
'name': 'Health Plans Inc.',
'type': 'Third-party administrator'},
{'industry': 'Benefits administration technology',
'name': 'Alegeus',
'type': 'Vendor'}],
'customer_advisories': 'Monitor account activity and report suspicious '
'transactions',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal health information '
'(PHI)',
'Social Security numbers']},
'date_publicly_disclosed': '2026-09-25',
'description': 'Health Plans Inc., a third-party administrator specializing '
'in self-funded employee health benefit plans, has reported a '
'data breach tied to its vendor, Alegeus, a benefits '
'administration technology provider. The incident may have '
'compromised personal health information (PHI) and Social '
'Security numbers of affected individuals.',
'impact': {'data_compromised': 'Personal health information (PHI) and Social '
'Security numbers',
'identity_theft_risk': 'High'},
'investigation_status': 'Under review',
'references': [{'source': 'Massachusetts Office of Consumer Affairs and '
'Business Regulation'}],
'regulatory_compliance': {'regulatory_notifications': 'Massachusetts Office '
'of Consumer Affairs '
'and Business '
'Regulation'},
'response': {'communication_strategy': 'Notification letters to impacted '
'individuals, urging them to monitor '
'account activity and report '
'suspicious transactions',
'remediation_measures': 'Two years of complimentary credit '
'monitoring and identity protection '
'services, dedicated customer service '
'line',
'third_party_assistance': 'IDX (credit monitoring and identity '
'protection services)'},
'title': 'Health Plans Inc. Discloses Data Breach Linked to Vendor Alegeus, '
'Exposing Sensitive Health and Personal Information',
'type': 'Data Breach'}