TriWest Healthcare Alliance officials notified 11,844 beneficiaries of a data breach that may have affected their protected health information. <\/p>\n
In a letter to one beneficiary dated July 2 and provided to Military Times, TriWest officials said they had discovered a security incident April 16, in which an unauthorized person gained limited, unauthorized access to TriWest information and downloaded it.<\/p>\n
\u201cWe are unaware of any misuse of your information,\u201d officials stated in the letter, but they went on to say TriWest is offering a free credit-monitoring service for those who feel it\u2019s needed.<\/p>\n
The unauthorized person obtained health-related and other personal information, specifically names, Department of Defense Benefits Numbers and beneficiaries\u2019 ZIP codes. Officials said that in fewer than five instances, the information also included Social Security numbers, addresses and dates of birth.<\/p>\n
About four million beneficiaries are covered by TriWest, the managed care contractor for the Tricare West Region. Active duty, retired, National Guard and Reserve, and their family members, survivors and certain former spouses receive their health care under DoD\u2019s Tricare program, with eligibility determined by the Defense Enrollment Eligibility Reporting System, or DEERS.<\/p>\n
TriWest is notifying each beneficiary about what information was involved in their specific case. <\/p>\n
The timing of the notifications was unclear, since at least one letter was dated July 2, about two and a half months after the incident occurred.<\/p>\n
\u201cWith regard to timing, as soon as the incident was discovered, TriWest took immediate action to prevent any further unauthorized activity and worked diligently with the government to notify affected individuals, consistent with applicable law and notification timelines,\u201d TriWest officials said in an email response to Military Times. <\/p>\n
The company hired a third-party forensic expert to review what information was accessed during the incident.<\/p>\n
Beneficiaries who want to use the free credit-monitoring service, offered through Experian for 24 months, should enroll by the deadline provided in their notification letter, using the activation code and instructions included in the letter.<\/p>\n