Tufts Health Plan

Point32Health, the parent company of Harvard Pilgrim Health Care and Tufts Health Plan, identified the “cybersecurity ransomware incident” on April 2023.

Point32Health shut down several systems to contain the danger after realizing that an "unauthorized party" had gained access to these systems. In advance and "out of an abundance of caution.

The main concern is making sure that members can still obtain care.

The team is working around the clock to provide workarounds so that members still access the services they require while we actively strive to restore the disrupted systems as swiftly and safely as possible.

Source: https://www.boston.com/news/local-news/2023/04/20/point32health-tufts-harvard-pilgrim-massachusetts-health-insurerance-cybersecurity-attack/

TPRM report: https://scoringcyber.rankiteo.com/company/tufts-health-plan

"id": "tuf24423423",
"linkid": "tufts-health-plan",
"type": "Ransomware",
"date": "04/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Point32Health',
                        'type': 'Healthcare'},
                       {'industry': 'Healthcare',
                        'name': 'Harvard Pilgrim Health Care',
                        'type': 'Healthcare'},
                       {'industry': 'Healthcare',
                        'name': 'Tufts Health Plan',
                        'type': 'Healthcare'}],
 'date_detected': 'April 2023',
 'description': 'Point32Health, the parent company of Harvard Pilgrim Health '
                'Care and Tufts Health Plan, identified the “cybersecurity '
                'ransomware incident” on April 2023. Point32Health shut down '
                'several systems to contain the danger after realizing that an '
                "'unauthorized party' had gained access to these systems. In "
                "advance and 'out of an abundance of caution.' The main "
                'concern is making sure that members can still obtain care. '
                'The team is working around the clock to provide workarounds '
                'so that members still access the services they require while '
                'we actively strive to restore the disrupted systems as '
                'swiftly and safely as possible.',
 'impact': {'systems_affected': ['Several systems']},
 'response': {'containment_measures': ['Shutting down several systems'],
              'recovery_measures': ['Providing workarounds',
                                    'Restoring disrupted systems']},
 'threat_actor': 'Unauthorized Party',
 'title': 'Ransomware Incident at Point32Health',
 'type': 'Ransomware'}