WebTPA Employer Services webtpa.com WebTPA Employer Services data breach: what happened and what to do
WebTPA Employer Services reported that an unauthorized person got in through a VPN connection, affecting 2,518,533 people. HHS says names, addresses, dates of birth and Social Security numbers were involved. Access began in April 2023.
View all 13,115 breaches- Breach date
- 18 Apr 2023
- Made public
- 8 May 2024
- Affected
- 2,518,533
- Data exposed
- Names, Physical addresses, Dates of birth, Social security numbers
- Last updated
What happened
WebTPA is a third-party administrator for insurers and benefit plans. It reported to HHS that an unauthorized individual gained access to its system through a VPN connection, affecting the electronic health information of 2,518,533 people. HHS dates the incident to 18 April 2023. Press reports say the company found suspicious activity in December 2023 and began notifying plans in March 2024.
As an administrator, WebTPA holds data for customers of other companies. Many people learned of the breach through their insurer or benefit plan.
What was exposed
HHS lists names, addresses, dates of birth and Social Security numbers. Reports at the time said financial account, card and treatment information wasn't part of it.
With a name, address, date of birth and Social Security number, a criminal can try to open credit in your name or file for benefits as you.
The company's response
WebTPA told HHS it added system monitoring and technical safeguards. According to BleepingComputer, it offered identity monitoring through Kroll.
What it means for you
If a letter arrived, enroll in the monitoring and freeze your credit at all three bureaus.
What to do if you were in it
- 1
Freeze your credit
Place a free credit freeze at Equifax, Experian and TransUnion. It blocks most new accounts opened in your name, and you can lift it whenever you apply for credit yourself.
- 2
Watch statements and credit reports
Check your bank, card and insurance statements for anything you don't recognize, and review your reports at annualcreditreport.com.
- 3
Expect phishing that mentions the breach
Emails, texts and calls may quote real details about you. Don't click links or give out information; go to the company's site yourself.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your details show up in a new leak.
Frequently asked
Was I affected by the WebTPA breach?
Affected people were notified by letter, often under the name of their insurer or benefit plan.
What was exposed?
HHS lists names, addresses, dates of birth and Social Security numbers.
Is there a settlement?
Press reports mention proposed class actions against WebTPA. A settlement hasn't been announced in the sources cited here.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
