As part of our commitment, we are sharing a recent security incident about unauthorized access to one employee’s mobile email account and the steps we took to protect our members.

What Happened

On July 11, 2023, Prime became aware that an unauthorized actor obtained access to an employee’s mobile email account.  Although we have no indication that the actor did so, it is possible that the unauthorized actor accessed a document that included personal health information of a limited number of our client’s members of Blue Cross and Blue Shield of Minnesota.  The unauthorized access began on July 9, 2023, and ended on July 10, 2023.

What Personal Information Was Involved

The personal information that could have been accessed by the unauthorized actor included member name, address, date of birth, member ID number and medication(s). At this point, Prime is not aware of any fraud or misuse of personal information as a result of this incident.

What We Are Doing

Upon discovery of this incident, Prime immediately conducted a comprehensive investigation into this matter and disabled the compromised credentials. Prime has blacklisted the unauthorized actor’s IP addresses and established monitoring for any future login attempts. Prime will continue to review internal procedures for potential improvements to strengthen account security, reinforce its existing policies and practices, and evaluate additional safeguards to help prevent a similar incident from reoccurring.

What Impacted Individuals Can Do

We recommend that impacted individuals regularly monitor any explanation of benefits statements that you receive, and if you notice any unfamiliar health care services, please contact your provider or insurer. If you have any other questions, please contact us at Prime Member Services using the toll-free number provided below.

For More Information

We sincerely apologize and regret any inconvenience or concern this matter may have caused. Please know that we take our responsibility to safeguard personal information very seriously and remain committed to protecting the privacy and security of the information entrusted to us.

If you believe you are affected and do not receive a letter by September 30, 2023, please contact us at 844-765-5942 or privacy@primetherapeutics.com.