What Happened

Conduent Business Services, LLC (“Conduent”) is a third-party service provider that offers printing/mailroom services, document processing services, payment integrity services, government benefit services, and other back-office support services. On January 13, 2025, we discovered that we were the victim of a cyber incident that impacted a limited portion of our network. Upon discovery, we immediately secured our networks and initiated an investigation with the assistance of third-party forensic experts. Our investigation determined that an unauthorized third party accessed our environment from October 21, 2024, to January 13, 2025, and obtained some files that contained individuals’ personal information, which came into our possession due to the services that we provide to your current and former health plan. Presently, we are unaware of any attempted or actual misuse of any information involved in this incident.

In addition to this notice, we are providing notice to individuals whose protected personal information was contained in the affected files. The personal information contained in these files may have included name, social security number, medical information, and health insurance information. Not every data element was present for every individual.

We sincerely regret any inconvenience this incident may cause affected individuals. Upon discovery, we secured our network, notified law enforcement authorities, and safely restored our systems and operations.

In addition, we have established a dedicated call center to answer your questions. If you have questions regarding this incident or believe you are an affected individual who did not receive a notification letter, please call, (855) 720-3675 (toll-free), Monday‒Friday, from 9:00 am to 6:30 pm Eastern Time.

What Happened

On February 6, 2025, Episource found unusual activity in their computer system. They quickly took steps to stop the activity. They began investigating right away and hired a special team to help them. They also called law enforcement. They turned off our computer systems to help protect the health plans we work with and their members.

Episource learned that a criminal was able to see and take copies of some data in their computer system.  This happened between January 27, 2025 and February 6, 2025.

What Information Was Involved

They first told the health plans they work with about this event on February 7, 2025. Starting on

April 22, 2025, they began notifying the health plans about what data may have been involved.

The data that may have been seen and taken was not the same for everyone and includes contact information (such as name, address, phone number and email), date of birth, plus one or more of the following:

• Health insurance data (such as health plans/policies, insurance companies, member/group ID numbers, and Medicaid-Medicare-government payor ID numbers)
• Health data (such as medical record numbers, doctors, diagnoses, medicines, test results, images, care, and treatment)
• Other personal data (such as Social Security number, driver’s license or state ID number, or other ID number).

What Episource is Doing

Episource took many steps to mitigate and help prevent events like this from happening again. They investigated and called law enforcement. They are also making our computer systems even stronger than before.

What You Can Do

Carefully review statements sent to you from your healthcare providers, insurance company, and financial institutions to ensure that all of your account activity is valid. Report any questionable charges promptly to the provider or company with which you maintain the account.

What if You Have Questions

If you have any questions or concerns, please call Episource toll-free at (877) 786-0549, Monday through Friday, 8 a.m. to 8 p.m. CT. We are sorry for any concern this event may cause.