Providence Health Assurance member notification

On Jan. 22, 2019, Providence Health Assurance was notified by Re-Solutions, a division of RSC Insurance Brokerage, Inc. (RSC), of a privacy incident involving health plan member information. RSC is a company that helped Providence Health Assurance obtain reinsurance coverage and seek reimbursement under that coverage. The incident involved the theft of a password-protected laptop of an employee of RSC. This notice explains the incident, measures we have taken, and some steps you can take in response.

RSC reported to Providence Health Assurance that their investigation and analysis of this incident led to the conclusion that unauthorized parties may have been able to access files and documents stored on the stolen password-protected laptop. When RSC learned of the theft on August 23, 2018, they notified law enforcement, changed the employee’s account credentials, and launched an investigation with the assistance of a leading cyber security firm. 

The information on the laptop varied and was not the same for all members. It included names, dates of birth, dates of service, member numbers, claims information, diagnosis, treatment information, and cost information. The laptop did not contain social security numbers for Providence Health Assurance members.

It’s important to note that to date, RSC and Providence Health Assurance have no evidence that any of information on the laptop was actually viewed, accessed, or has been misused. However, out of an abundance of caution and as required by federal privacy laws, we want to let you know that this happened and assure you that we take it very seriously. RSC, on behalf of Providence Health Assurance, began notifying the potentially affected members on March 21, 2019. 

We recommend that you take the following steps to protect yourself:

  • Regularly review the explanations of benefits that you receive from Providence Health Assurance. If you see services that you did not receive, please contact Providence Health Assurance immediately, using the phone number on the back of your member identification card.
  • If you believe your information may have been involved in this incident, please contact the dedicated call center at the numbers listed below. If the call center representative determines that you were affected by this incident, they will, as a precaution, ensure that you receive the necessary information to receive a complementary one year membership of Experian’s® IdentityWorksSM, a credit monitoring and identity protection support product.

Please note: Only those members who may be potentially affected will receive a letter in the mail. If you have not received a notification from RSC or Providence Health Assurance regarding this specific incident, either your information was not on the laptop or your contact information on file with Providence Health Assurance was out-of-date.

Providence Health Assurance worked with RSC to establish a dedicated call center to answer any questions. If you believe you may be affected by this incident, but did not receive a letter, please call 1-877-734-5366, TTY 1-877-213-1937, Monday through Friday, 9 a.m. to 8 p.m., Eastern Standard Time. Additional information is also available at: https://www.risk-strategies.com/privacy-incident-notification

H9047_2019PHA212
Webpage current as of 3/21/2019