ATLANTA — MCNA Insurance Company, which provides services to many state Medicaid agencies and Children's Health Insurance Programs (CHIP), announced a data security breach that involves recipients' personal information.
The company listed more than 100 affected organizations impacted by the notice, including Alabama, Texas, and Iowa Departments of Health and/or Human Services, and dozens of local Teamsters and union organizations.
They did not estimate a number of affected members.
Officials with MCNA say an unauthorized third party was able to access and remove copies of personal data from its computer systems between February 27 and March 7, 2023.
In a statement, MCNA representatives say they became aware of the breach on March 6, contacted law enforcement, and began an investigation the same day.
Personal data which may have been involved includes:
- demographic and contact information (names, addresses, etc.)
- date of birth
- Social Security number
- driver's license and/or government-issued ID number
- health insurance information including ID, plan, and/or group numbers
- dental/orthodontic care history
- billing and claims information
- parent, guardian, or guarantor information.
The company says not all data was involved for all affected individuals.
"MCNA takes privacy and security very seriously. In response to this incident, MCNA has further enhanced its security and monitoring practices and further strengthened its systems to minimize the risk that a similar incident occurs in the future," the company said in their statement.
Those who were impacted by the breach are being notified. MCNA will offer free credit monitoring and identity protection services to those affected.
Members with questions about the incident are encouraged to call 1-888-220-5006 from 9 a.m. to 9 p.m. Eastern Time on operating business days.