Notice of Data Security Incident
Zomo Health, LLC (“Zomo Health”) provides population health management solutions to employer groups. Regrettably, this notice is regarding a security incident that involved some health plan members’ information.
What happened?
On August 5, 2022, Zomo Health learned that a spreadsheet containing plan member information was inadvertently made accessible via our website. We immediately took steps to ensure the spreadsheet and content were no longer accessible or searchable via the internet and began an investigation. Our investigation determined the spreadsheet was accessible between January 15, 2022 and August 5, 2022. The file was made accessible through human error and was not due to intentional or malicious actions.
What information was involved?
A review of the spreadsheet determined it included plan members’ names, dates of birth, Social Security numbers, health plan name, work addresses, phone numbers, email addresses, and information regarding participation in health plan incentives.
What are we doing?
Once we learned of the error, we immediately secured the spreadsheet and its contents. As a result of this incident, we have remediated the process vulnerability that led to the error and engaged an external security company to enhance the security of our technology systems on an ongoing basis.
What can you do?
While the investigation did not find any instances of fraud or identity theft that have occurred as a result of this incident, out of an abundance of caution, beginning September 29, 2022, we are mailing letters to members whose information was reflected in the spreadsheet. We are also providing resources involved individuals can use to help protect their information, including complimentary credit monitoring and identity protection services to individuals whose Social Security numbers were involved in this incident. We also recommend members regularly review the explanation of benefits received from their health insurer, and report any inaccuracies to the insurer immediately.