120K HAP customers warned of vendor data breach

Charles E. Ramirez
The Detroit News
Health Alliance Plan is informing some of its customers about a potential leak of their private information, company officials said.

Detroit — A tech company is warning some Health Alliance Plan customers about a potential leak of their private information, company officials said Wednesday.

Wolverine Solutions Group, a vendor of the Detroit-based health insurance company, was the target of a computer hack that may have exposed some personal and protected health information of customers of HAP and its other clients.

"HAP takes its responsibility to protect our members’ information very seriously," HAP officials said in a statement. "We sincerely apologize this happened to our members. Wolverine Solutions Group has issued an apology to HAP and our impacted members."

They also said the malicious software attack on Detroit-based Wolverine Solutions happened around Sept. 23, 2018, and impacted about 120,000 HAP members.

"The information that may have been exposed included the following: name, address, date of birth, member identification number, health care provider name, patient identification number and claim information (service code and payment amount)," the statement said. "No Social Security numbers or credit card information of HAP members was exposed."

They added Wolverine Solutions said it is not aware of the information being used for any inappropriate purpose and is offering 12 months of free identity and monitoring services to all those who are affected. 

HAP members who have questions about the incident should call (877) 412-7152.

Data breaches have become common in the past few years.

Uber in September agreed to pay $148 million after failing for more than a year to notify 600,000 U.S. Uber drivers that hackers had accessed personal data, including driver's license information. Hackers also took the names, email addresses and cellphone numbers of 57 million riders around the world.

Facebook in October said 30 million accounts had been breached, with attackers getting phone numbers and email addresses, and information on location history and recent searches on Facebook.

In November, Marriott International said hackers stole information on as many as 500,000 customers of Starwood hotels.

cramirez@detroitnews.com
Twitter: @CharlesERamirez