One Touch Point Ransomware Incident Notification

Date: 08/04/22

On June 16, 2022, Ambetter from Superior HealthPlan received notice that some of our member information was involved in a cyber incident encountered by the vendor One Touch Point, Inc. (“OTP”). OTP is a vendor of our contracted provider, Matrix Medical Network (“Matrix”). Matrix used OTP for printing and mailing services on behalf of our members.

OTP had the incident between April 27, 2022, and June 3, 2022. During that time, an unauthorized actor may have accessed our data files stored on OTP’s systems. Upon learning of the cyber incident, OTP instantly took measures to contain the incident. They began an investigation. They engaged a cyber security firm with experience in these matters and notified the United States Federal Bureau of Investigation (FBI). OTP worked to support the investigation. The investigation concluded that Texas Ambetter members were impacted by this incident.

The member information involved in this incident included the following types of information:

• Name
• Healthcare ID Number
• Clinical Information Including Diagnosis

Social Security Number was not included or involved.

The following actions have been taken in response to this incident:

• We promptly activated our incident response plan and worked with the vendor so we could notify the members involved as quickly as possible.
• Matrix stopped business operations with OTP.
• OTP reported the matter to the FBI.
• OTP has implemented additional security procedures to guard against this happening again.
• We are providing impacted individuals with information about identity theft protection.

Ambetter is deeply committed to protecting individuals’ privacy, and we sincerely regret any inconvenience this incident may have caused.

For more information, or if you have any questions about this incident, please call Member Services at 1-877-687-1196, Monday – Friday 8:00 a.m. – 8:00 p.m. (Relay Texas/TTY: 1-800-735-2989).