OneDigital Announces Response to Data Security Event

At OneDigital, safeguarding your personal information is one of our top priorities, and because of that, we have state-of-the-art information security systems to protect your data. However, despite our efforts, OneDigital was the target of a sophisticated cyber-attack, and an unauthorized actor gained access to some of OneDigital’s systems and obtained personal information of some health and welfare plan participants.

OneDigital is providing notice of a data security incident. The following notice provides you with information about the incident, OneDigital’s response, and resources available to help individuals protect their information from possible misuse, should they feel it is necessary to do so. While we are unaware of misuse of information, we encourage individuals to remain vigilant against incidents of identity theft and fraud.

What Happened?

On or around January 20, 2021, OneDigital became aware of unusual activity on its network. Upon discovery of the unusual activity, OneDigital immediately investigated to better understand the nature and scope of this activity. Based on our investigation, we determined that an unauthorized individual(s) may have obtained files which contained personal information and protected health information about you. The investigation was not able to determine whether any specific personal information about you was viewed by the unauthorized individual(s). Out of an abundance of caution, a programmatic and manual review of the files was completed to determine whether sensitive personal information was present at the time of the incident. Through this process, OneDigital determined that certain personal information and personal health information was contained in the files.

What Information Is Involved?

It cannot be confirmed whether information related to individuals was actually accessed or viewed during this incident. However, OneDigital is providing notice to impacted individuals out of an abundance of caution. The information which was accessible within the compromised files included certain individuals’ clinical and financial information such as, name, address, date of birth, healthcare provider, health insurance number, group number, dates and types of health care services, medical record number, lab results, prescription, payment and claims information. The confidential information of a very small number of impacted individuals included a Social Security number.

What We Are Doing.

OneDigital takes this incident and the security of personal information entrusted to us very seriously. In response to this incident, OneDigital conducted a thorough forensic analysis and investigation. After blocking, containing, and eliminating the unauthorized individual(s), OneDigital implemented additional security measures to further fortify its network’s security measures and protocols, including enhancing administrative and technical safeguards and instituting more frequent and rigorous security training. OneDigital is also offering complimentary identity monitoring services through Kroll to individuals whose personal information was listed in the compromised files at the time of this incident.

What You Can Do.

Individuals can find out more about how to protect themselves against the potential misuse of their personal information by reviewing the guidance on this website. On this website, individuals can also find further information about complimentary access to identity monitoring services. You can activate those services here. For more information on how to protect against identity theft, we suggest that you contact the Federal Trade Commission and your state consumer protection agency.

For More Information.

OneDigital takes our responsibility to protect the information that you entrust to us very seriously, and we are here to support you. If you have questions about this incident that are not addressed in this notice, please do not hesitate to call (855) 551-1516 from 8:00 a.m. - 5:30 p.m. Central Time, Monday through Friday.

Who is OneDigital?

Information about OneDigital can be found at www.onedigital.com.

Kroll’s Adult Identity Monitoring Includes:

Single Bureau Credit Monitoring

You will receive alerts when there are changes to your credit data—for instance, when a new line of credit is applied for in your name. If you do not recognize the activity, you’ll have the option to call a Kroll fraud specialist, who will be able to help you determine if it is an indicator of identity theft.

Web Watcher

Web Watcher monitors internet sites where criminals may buy, sell, and trade personal identity information. An alert will be generated if evidence of your personal identity information is found.

Public Persona

Public Persona monitors and notifies when names, aliases, and addresses become associated with your Social Security number. If information is found, you will receive an alert.

Quick Cash Scan

Quick Cash Scan monitors short-term and cash-advance loan sources. You will receive an alert when a loan is reported, and you can call a Kroll fraud specialist for more information.

$1 Million Identity Fraud Loss Reimbursement

Reimburses you for out-of-pocket expenses totaling up to $1 million in covered legal costs and expenses for any one stolen identity event. All coverage is subject to the conditions and exclusions in the policy.

Fraud Consultation

You have unlimited access to consultation with a Kroll fraud specialist. Support includes showing you the most effective ways to protect your identity, explaining your rights and protections under the law, assistance with fraud alerts, and interpreting how personal information is accessed and used, including investigating suspicious activity that could be tied to an identity theft event.

Identity Theft Restoration

If you become a victim of identity theft, an experienced Kroll licensed investigator will work on your behalf to resolve related issues. You will have access to a dedicated investigator who understands your issues and can do most of the work for you. Your investigator will be able to dig deep to uncover the scope of the identity theft, and then work to resolve it.

Kroll’s Minor Identity Monitoring Includes:

Minor Identity Monitoring

Minor Identity Monitoring detects when names, addresses, and credit information is associated with your child’s Social Security number. An alert will be sent to you when activity is detected. The presence of a credit file may be an indicator of identity theft or fraud for children who, as minors, should not have a credit history.

Fraud Consultation

You have unlimited access to consultation with a Kroll fraud specialist. Support includes showing you the most effective ways to protect your identity, explaining your rights and protections under the law, assistance with fraud alerts, and interpreting how personal information is accessed and used, including investigating suspicious activity that could be tied to an identity theft event.

Identity Theft Restoration

If you become a victim of identity theft, an experienced Kroll licensed investigator will work on your behalf to resolve related issues. You will have access to a dedicated investigator who understands your issues and can do most of the work for you. Your investigator will be able to dig deep to uncover the scope of the identity theft, and then work to resolve it.

Frequently Asked Questions