LogicGate logicgate.com LogicGate data breach: what happened and what to do
LogicGate, a risk and compliance software company, reported a cyberattack that exposed health information of 47,035 people in 2021. It included names, Social Security numbers, addresses, dates of birth, claims data and diagnoses.
View all 13,177 breaches- Breach date
- 23 Feb 2021
- Affected
- 47,035
- Data exposed
- Names, Social security numbers, Physical addresses, Dates of birth, Financial information, Claims information, Diagnoses, Medications, Treatment information
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
LogicGate makes cloud software that companies use to manage risk and compliance. According to TechCrunch, an intruder got into LogicGate's cloud environment on February 23, 2021 using credentials belonging to an employee, then reached backup files. LogicGate told its customers about the incident in late March and early April 2021.
Because LogicGate acted as a business associate for health plans and providers, it reported the incident to the U.S. Department of Health and Human Services as a cyberattack affecting the health information of 47,035 people. The people affected were customers of LogicGate's clients, not LogicGate's own customers, which is why many of them first heard about it from a health plan.
Sources checked: ocrportal.hhs.gov, techcrunch.com, consumer.ftc.gov
Last verified against the official page:
What was exposed
HHS lists names, Social Security numbers, addresses, dates of birth, financial and claims information, diagnoses, medications and other treatment information. That combination matters more than any single item. A Social Security number with a name and date of birth is what criminals need to open credit in someone else's name, and medical details make phishing calls and letters that mention your real treatment sound convincing.
The company's response
LogicGate notified HHS, the people affected and the media, offered complimentary credit monitoring and added administrative and technical safeguards.
What this means for you
If you got a letter, take the credit monitoring and freeze your credit. If a message about this breach asks for money or a Social Security number, it isn't from your health plan.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze is free and stops lenders from seeing your credit report, which blocks most new accounts opened in your name. You place it separately at Equifax, Experian and TransUnion, per the FTC.
- 2
Take the free credit monitoring in your letter
The FTC recommends accepting the monitoring a company offers after a breach. Enroll using the instructions in your notice, not a link in an unsolicited message.
- 3
Read your health plan statements
Check explanation of benefits statements for treatment you didn't receive, and report anything odd to your insurer.
- 4
Report misuse
If someone uses your details, report it at IdentityTheft.gov to get a recovery plan.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your details show up, so you know when to repeat these steps.
Official filings
- U.S. Department of Health and Human Services , filed 26 May 2021 : 47,035 people
Timeline
-
The breach happened
-
Reported to U.S. Department of Health and Human Services
Frequently asked
Was I affected by the LogicGate breach?
Notices went to people whose health plan or provider used LogicGate. If you didn't get a letter, you're probably not in the 47,035 people HHS lists.
What was exposed in the LogicGate breach?
HHS lists names, Social Security numbers, addresses, dates of birth, financial and claims information, diagnoses, medications and other treatment information.
Should I freeze my credit after this breach?
Yes, if you were notified. Social Security numbers were involved, and a freeze is free at Equifax, Experian and TransUnion.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
