New Era Technology's Vendor Data Breach Exposes Employees' Social Security Numbers

New Era Technology notified employees that its healthcare advocacy vendor, Quantum Health, experienced a cybersecurity incident. The incident resulted in unauthorized access to Quantum Health's systems and may have exposed personal information belonging to New Era employees and their dependents.

The company's breach notification letter was received by Claim Depot as a tip and has not been publicly posted. The notification did not disclose the total number of individuals affected, the specific dates of the incident or any filings with state attorneys general.

According to the company's notification letter, Quantum Health recently experienced a cybersecurity incident that resulted in unauthorized access to its systems. Quantum Health serves as New Era Technology's healthcare advocacy vendor, meaning it handles health-related services on behalf of New Era's employees. The notification did not describe the specific method of attack or identify a threat actor.

Based on information that Quantum Health provided to New Era, the types of personally identifiable information (PII) that may have been exposed include dates of birth, Social Security numbers and other personal data.

The exposure of Social Security numbers is particularly concerning because this information can be used for identity theft and financial fraud.

New Era emphasized in its notification that the incident occurred within Quantum Health's environment. The company stated that this "was not the result of a security breach of New Era Technology systems, networks, or infrastructure," according to the notification letter.

New Era Technology's response

According to the company's notification, Quantum Health has engaged Kroll, a risk and identity protection provider, to manage communications and provide support for individuals affected by the incident. Kroll will send notification letters to impacted individuals via U.S. mail in the coming weeks.

Those email notices and letters will include several important resources. Affected individuals will receive instructions for accessing a secure portal where they can view the specific information that may have been exposed. The letters will also include information about credit monitoring services available to affected adults. For impacted minors, the letters will provide details about identity monitoring services. Additional resources and support related to the incident will be included as well.

New Era stated in its notification that the company is "actively reviewing Quantum Health's security practices, infrastructure, and overall response to this incident." The company also said it is "exploring all solutions to ensure that we continue providing services that align with the expectations we have for safeguarding our employees' information."

The notification added that New Era "takes this matter very seriously" and will "continue to advocate on behalf of our employees" to ensure Quantum Health completes its notification and remediation efforts. The company acknowledged that "incidents like this can be unsettling" and expressed that it is "disappointed by both the occurrence of this event and the circumstances that led to it."

Affected individuals who have general questions can contact New Era's HR team at 877-696-7720 or by emailing hr@neweratech.com. For questions specific to the details of the incident and each individual's situation, Quantum Health will serve as the primary point of contact, as they have access to the specifics of what was affected for each person.