Magnolia Health's Vendor Reports a Data Security Incident
Date: 07/23/20
This incident may have affected your protected health information. However, due to the limited amount of information impacted, Magnolia Health cannot be certain whether your information was affected and is providing notice out of an abundance of caution. Magnolia Health is not aware of any fraud or misuse of your personal information at this time. You may read more about this incident below or you may contact our call center with any questions at 1-866-912-6285, Relay 711.
What Happened
On April 11, 2020, Magellan found out it was targeted by a ransomware attack. The unauthorized actor gained access to Magellan’s systems after sending a phishing email on April 6 that impersonated a Magellan client. Once the incident was found, Magellan immediately retained a leading cybersecurity forensics firm, Mandiant, to help conduct a thorough investigation of the incident. The investigation revealed that this incident may have affected your personal information. At this point, we are not aware of any fraud or misuse of any of your personal information due to this incident, but we are notifying you out of an abundance of caution.
Why Does Magellan Have My Personal Information
Magnolia uses Magellan to provide consultation services to your health care provider about benefits, such as radiology services, like CT and MRI scans, physical therapy and occupational therapy.
What Information Was Involved
The personal information accessed by the unauthorized actor may have your name and one or more of the following: treatment information, health insurance account information, member ID, other health-related information, email addresses, phone numbers, and physical addresses. The information involved in this incident did not included your Social Security number or other financial information.
What We Are Doing
Magnolia has worked closely with Magellan since this incident occurred. Magellan immediately reported the incident to, and is working closely with, the appropriate law enforcement authorities, including the FBI. In addition, to help prevent a similar type of incident from occurring in the future, Magellan has implemented additional security protocols designed to protect our network, email environment, systems, and personal information. Magnolia will continue to work with Magellan to monitor the implementation and effectiveness of these new controls.
What You Can Do
Please review the “Information About Identity Theft Protection” guide, which gives additional steps you may take to help protect yourself. Keep a copy of this letter for your records in case of any potential future problems with your health plan benefit or other records. Review any statements you receive about your health plan benefits regularly and carefully. If you see any treatment or services that you believe you did not seek or receive, please contact our call center at 1-866-912-6285, Relay 711.
Information About Identity Theft Protection (PDF)
For More Information
The security of your personal information is important to us and we are sorry that this incident occurred. For more information, or if you have any questions or need additional information, please contact our call center at 1-866-912-6285, Relay 711.