Data Breach Incident

(Former Medicare Members)

Affinity Legacy, Inc. (formerly known as Affinity Health Plan, Inc.) was informed that a data breach at former third party vendor, TMG Health (a Cognizant Technology Solutions company), resulted in the theft of the personal information of 5,538 former Medicare Advantage members. Importantly, none of Affinity’s systems were impacted by this incident.

What Happened & Who Was Impacted

Individuals impacted were either former members of Affinity’s Medicare Advantage Plan prior to 2019, or following 2019, members of an EmblemHealth Medicare Advantage Plan. In 2019, Affinity’s Medicare Advantage Plan was sold to EmblemHealth.

TMG provided claims processing services to Affinity Health Plan prior to 2019. As part of those services, TMG received personal health information regarding Medicare members. On June 21, 2023, TMG determined that an unauthorized party had accessed and downloaded certain files from its MOVEit Secure File Transfer server between May 30 and June 2, 2023.

After a thorough investigation, TMG confirmed that files containing member’s personal health information were impacted by this incident. While the breached personal information varies by individual member, it may include name, mailing address, date of birth, social security number, Medicare number and /or medical diagnoses codes. Affinity has mailed notices to all affected members containing an explanation of the breach and personalized information on the data breached for each member.

TMG Health is continuing to monitor its systems and is updating its systems to block these activities and prevent disclosures of this nature from occurring in the future. TMG is committed to maintaining the privacy and security of member information and are taking this incident very seriously.

Steps You Can Take

The privacy and security of your information is a top priority for Affinity and for TMG Health. We recommend you monitor your bank accounts and credit card statements and watch for any suspicious activity. If you notice anything unusual, or if you suspect or discover that your information has been used inappropriately, please notify your local law enforcement or consumer protection agency.

Additionally, to assist in protecting you from any potential identity theft, TMG Health is offering complimentary Personal Identity and Privacy Protection through a national leader in data breach response services, IDX A ZeroFox Company, the data breach and recovery services expert. IDX identity protection services include: credit and CyberScan monitoring, an insurance reimbursement policy and fully managed identification theft recovery services. With this protection, IDX will help you resolve issues if your identity is compromised.

TMG Health encourages members to contact IDX with any questions and to enroll in the free identity protection services by calling 1-888-774-9246, going to response.idx.us/incident-response, or by scanning the QR image provided in the notice mailed to members. IDX representatives are available Monday through Friday from 9 am – 9 pm ET.

For More Information

If you have any questions, please call the toll-free help line at 1-888-727-2311.