UCare Notifies Some Members of Email Incident

UCare Minnesota (“UCare”) works hard to protect our members’ private information.  While we have no proof that any information has been misused, we recently had an incident that may have involved some members’ information.

In late April 2020, UCare became aware of unusual network activity. We immediately began an investigation with the assistance of a computer forensic firm.  Between May 15 and May 21, we learned that a limited number of UCare email accounts were subject to unauthorized access on May 4, 2020.  UCare immediately began changing passwords for our email accounts.  UCare also enhanced security for our email accounts.

After determining that some UCare email accounts were subject to unauthorized access, we reviewed emails and attachments in the accounts to identify whether member information may have been accessible.  On September 1, 2020, we discovered that one or more of the email accounts may have had information about a limited number of our members.  The information involved may have included members’ names, dates of birth, healthcare provider name(s), treatment and/or diagnosis information, health insurance member ID numbers, and/or claim cost information.

UCare does not have any proof that members’ information was taken or misused by the unauthorized person. However, we suggest that impacted members review any statements received from UCare or their healthcare provider(s). If they see charges or services they did not receive, they should contact UCare and/or the provider immediately. We sent letters to impacted members for which we have mailing addresses. We set up a dedicated call center to answer questions members may have about this incident.  The call center is open Monday through Friday, 8:00 a.m. to 5:30 p.m. Central Time at 1-888-604-0289.

We regret any concern this incident may cause our members. To help prevent this from happening again, we educated employees about email security and enhanced email security.  We train and test all employees about email best practices and use security technology to help prevent these types of incidents and protect members’ privacy

Members with questions may call 1-888-604-0289, Monday through Friday, between 8:00 a.m. and 5:30 p.m. Central Time.

UCare Privacy Officer

U10040 09/2020