Health Plans Inc. Data Breach Exposes SSN in MA

Published

August 18, 2025

Updated

August 18, 2025

Health Plans, Inc.

Types of INFORMATION affected

Names
Social Security Numbers
Dates of Birth
Addresses
Government IDs
Medical Info
Financial Info

On Aug. 13, 2025, Health Plans Inc. (HPI) reported a data breach to the Massachusetts Attorney General’s office. The incident was disclosed as exposing sensitive information including names and Social Security numbers, and possibly protected health data.

According to the company’s disclosure, the breach involved unauthorized viewing of personal information used to administer employment-related benefits. The cybersecurity incident was disclosed to the Massachusetts Attorney General's office on Aug. 13, 2025. Health Plans Inc is also notifying impacted individuals by mail.

Exposed information may include names, dates of birth, Social Security numbers, contact information, health insurance information and medical records. The breach is considered severe due to the exposure of Social Security numbers, which are highly sensitive and can be used for identity theft or fraud.

HPI's response

In addition to required state and federal disclosures, HPI is offering impacted individuals 24 months of free Kroll credit monitoring services.

If you receive notification from HPI or your employer about this breach, you may want to:

Sign up for the free Kroll credit monitoring services, offered by Health Plan Inc.
Monitor your credit reports and financial accounts for any unusual activity.
Be alert for phishing emails or phone calls that may use your exposed information.
Consider placing a fraud alert or credit freeze with major credit bureaus.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.