Pittsburgh, Feb. 5, 2021 – UPMC Health Plan is alerting approximately 19,000 individuals regarding an incident that involved information stored in a UPMC Health Plan employee’s email account.
On Dec. 9, UPMC Health Plan was notified that protected health information (PHI) may have been improperly viewed as a result of a phishing incident directed toward an employee the previous day. Information potentially exposed included Name, Date of Birth, Parent/Guardian Name and Limited Clinical Information Including Dental Provider and Procedure Information.
UPMC Health Plan began notifying individuals potentially impacted by the incident on Feb. 3 and, although there is currently no evidence that the PHI has been misused, UPMC Health Plan has established a dedicated call center at 1-833-281-5604. The call center can answer any questions and provide guidance on how to obtain a free credit report.
To protect against future phishing attacks, UPMC Health Plan is reviewing existing policies, controls and processes and will address accordingly.