McElroy & Associates (OPEH&W Health Plan) Data Breach Affects 6,633 People

McElroy & Associates, Inc. recently experienced a significant data breach that exposed the personally identifiable information (PII) and protected health information (PHI) of 6,633 individuals in the U.S. The breach was officially disclosed to the U.S. Department of Health and Human Services on Oct. 17, 2025.

The incident was first detected on May 30, 2025, when suspicious activity was discovered in an employee’s email account. An investigation revealed that an unauthorized actor gained access to certain emails between May 28 and May 30, 2025.

The breach allowed the intruder to access a range of sensitive information, including names, addresses, Social Security numbers, dates of birth, driver’s license numbers, financial account details, medical information, health insurance information, and usernames with passwords.

This means both personally identifiable information (PII) and protected health information (PHI) were at risk. By Sept. 3, 2025, the company finalized its analysis of the impacted data and began the process of notifying affected individuals by mail. McElroy & Associates also posted a Notice of Data Security Event on its website.

McElroy & Associates' response

In response to the incident, McElroy & Associates took several immediate steps to secure their systems and protect affected individuals. The company launched a comprehensive investigation, secured their email environment, and reviewed all potentially impacted information.

If you believe your personal information may have been compromised in this breach:

• Carefully review any notice or communication you receive from McElroy & Associates or your provider.
• Monitor financial accounts and credit reports for signs of identity theft.
• Consider placing fraud alerts or credit freezes with the major credit bureaus.
• Be cautious of unsolicited emails or phone calls requesting personal information.

For those who may have been affected but did not receive a letter, McElroy & Associates has set up a dedicated help line at 833-866-9545, available from 8 a.m. to 8 p.m. ET.