ALBANY, N.Y., Aug. 5, 2016 /PRNewswire/ -- Newkirk Products, Inc. ("Newkirk") today announced a cyber security incident involving unauthorized access to a server containing certain personal information. Newkirk is a service provider that issues healthcare ID cards for health insurance plans including Blue Cross and Blue Shield of Kansas City, Blue Cross Blue Shield of North Carolina, HealthNow New York Inc., BlueCross BlueShield of Western New York, BlueShield of Northeastern New York, and Capital District Physicians' Health Plan, Inc. (CDPHP), and, through Newkirk's relationship as a service provider to DST Health Solutions, Inc., Gateway Health Plan, Highmark Health Options, West Virginia Family Health, Johns Hopkins Employer Health Programs, Inc., Priority Partners Managed Care Organization and Uniformed Services Family Health Plan.
No health plans' systems were accessed or affected in any way.
The data potentially subject to unauthorized access varies by plan but includes some combination of: the member's name, mailing address, type of plan, member and group ID number, names of dependents enrolled in the plan, primary care provider, and in some cases, date of birth, premium invoice information and Medicaid ID number. The server did not contain Social Security numbers, banking or credit card information, medical information or any insurance claims information.
On July 6, 2016, Newkirk discovered that a server containing member information was accessed without authorization. Newkirk shut down the server, started an investigation into the incident and hired a third party forensic investigator to determine the extent of the unauthorized access and whether the personal information of its clients' members may have been accessed. Newkirk also notified federal law enforcement. While the forensic investigation is ongoing, it appears that the unauthorized access first occurred on May 21, 2016. Although the information contained on the server may have been accessed, Newkirk has no evidence to date that such data has been used inappropriately.
Broadridge Financial Solutions, Inc. acquired Newkirk on July 1, 2016 from DST Systems, Inc. ("DST"). DST Health Solutions, Inc. is a subsidiary of DST. The Broadridge network was not compromised, as the Newkirk network has not been integrated into Broadridge. Furthermore, there is no evidence at this time that any other Newkirk or DST service or infrastructure has been impacted by this incident.
Letters to those impacted by the incident are being mailed. These letters include an explanation of the incident, an offer of two years of free identity protection and restoration services and information about additional ways impacted individuals can protect themselves.
To Learn More
Newkirk has established a dedicated assistance line for anyone seeking additional information regarding this incident, as well as steps to better protect against identity theft. This assistance line can be reached at 1-855-303-9773 (TTY/TDD: 711), Monday - Saturday, 8am - 8pm CST. Newkirk has also established a dedicated website (www.newkirkproductsfacts.com) where members can access information regarding the incident, including frequently asked questions and answers.
Identity Protection Tips
Newkirk recommends that impacted individuals enroll in the complimentary identity protection and restoration services. In addition, Newkirk recommends that impacted plan members review their account statements, medical bills, and health insurance Explanations of Benefits statements regularly for suspicious activity. Report all suspicious or fraudulent charges to your health insurance provider.
Newkirk Products, Inc.
DST Systems, Inc.
Laura M. Parsons
Blue Cross and Blue Shield of Kansas City
Blue Cross Blue Shield of North Carolina
HealthNow New York Inc., BlueCross BlueShield of Western New York, BlueShield of Northeastern New York
Gateway Health Plan
Highmark Health Options
West Virginia Family Health
Johns Hopkins Employer Health Programs, Inc.
Priority Partners Managed Care Organization
Uniformed Services Family Health Plan
Johns Hopkins HealthCare LLC
To view the original version on PR Newswire, visit:http://www.prnewswire.com/news-releases/newkirk-products-inc-provides-notice-of-data-breach-300309995.html
SOURCE Newkirk Products, Inc.