TMG Health Security Incident

August 17, 2023

TMG Health Security Incident

Blue Cross Blue Shield of Arizona (AZ Blue) was informed of a cyber-attack that happened to TMG Health, a company that provides data services to assist AZ Blue with enrollment-related files. TMG Health reported that the incident may involve personal information of some of our Medicare prescription drug plan members. Members potentially affected by this incident were notified. No AZ Blue systems were directly impacted by this cyber-attack.

What we know today:

On June 21, 2023, TMG Health learned that it was the victim of a cyber-attack. TMG Health has determined that the downloaded data may include AZ Blue Medicare prescription drug plan members' names and one or more of the following information: member ID, address, email address, phone number, date of birth, Social Security Number, and/or banking information.

In response, TMG Health took steps to make sure its systems were safe, began an investigation to help it understand what happened, and contacted law enforcement.

TMG Health discovered that some of its data files were downloaded by a person who did not have permission to take them.

TMG Health is also continuing to monitor its systems, and it is updating its systems to try to prevent this from happening again. The company is committed to maintaining the privacy and security of your information and is taking this incident very seriously.

Steps You Can Take:

The privacy and security of your information is a top priority for AZ Blue and for TMG Health. Therefore, we recommend you monitor your bank accounts and credit card statements and watch for any suspicious activity. If you notice anything unusual, or if you suspect or discover that your information has been used inappropriately, please call the police.

Additionally, to assist in protecting you from any potential identity theft, TMG Health is offering one year of complimentary Personal Identity and Privacy Protection through a national leader in data breach response services, IDX A ZeroFox Company, the data breach and recovery services expert. IDX identity protection services include: 12 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed id theft recovery services. With this protection, IDX will help you resolve issues if your identity is compromised.

TMG Health encourages members to contact IDX with any questions and to enroll in the free identity protection services by calling 1-888-727-2311 or going to IDX representatives are available Monday through Friday from 9 a.m. - 9 p.m. ET. Please note the enrollment deadline is [3 months from the date of this letter].

For More Information:

AZ Blue will continue to make the security of its members’ information a top priority. If you have any questions, please call the toll-free help line at 1-888-727-2311.