Healthcare Data Breaches: WebTPA

Two female health information technology professionals are analyzing data on a computer

Another recent significant data breach was discovered at a company that provides administrative services to non-profit hospitals and assists in building customized health care plans.  The breach actually happened back in early 2023 but it was only recently discovered and it has impacted over 2 million individuals.  According to their website, evidence of suspicious activity was discovered on their network in December 2023 from a breach that occurred in April 2023 and this prompted them to launch a full-scale investigation to determine what have happened.  

It was discovered that an unauthorized user had gained access to consumer information including contact information, birthdates, social security numbers and insurance information.  Not all of these factors for each affected individual were exposed but at least some of this data was exposed for all individuals and was put at risk for misuse due to this security breach.  Luckily in this case it was determined that financial information, such as credit card numbers, and medical information were not compromised.  WebTPA indicates that they have not been made aware of any illegal use of this information but they have put measures into place to help anyone who might have been impacted including a call center for people with questions.  In addition, WebTPA has consulted cyber security experts and they have been able to strengthen the security of their network to help prevent future data breaches.

Unfortunately, the amount of time that it took for someone to discover this particular security breach is not uncommon.  There have been similar instances in which a breach has occurred and the suspicious activity was not detected for several months.  Security breaches have increased exponentially in the past several years and organizations, especially those in the healthcare industry, need to be more and more vigilant to any kind of suspicious network activity.  In this case, the attacker appeared to have only had access for a short time but the possibility existed that unauthorized access could have continued for a longer period of time impacting even more people due to how long it took to detect the activity.  More than ever, it is crucial for organizations to consult with or hire individuals with specialized cyber security skills and training.  Cambridge College of Healthcare & Technology offers comprehensive educational programs in Cyber and Network Security with an emphasis on applying the knowledge gained in a healthcare setting.  By enrolling in our programs, students are prepared to step into roles where they can significantly reduce risks by implementing robust cyber security measures.  These programs are fully online and work with your busy schedule.  Students can choose to pursue a certificate/diploma, an associate’s degree or a bachelor’s degree in cyber and network security depending on what they are interested in accomplishing.  Check out the Cambridge website to learn more about these exciting programs or give us a call at 1-877-206-4279.