IU Health Plans reports security incident by third-party vendor’s law firm

IU Health Plans announced today that the law firm of its network vision manager, EyeMed, recently experienced a security incident. The law firm, Orrick, Herrington & Sutcliffe, LLC (Orrick), served as legal counsel to EyeMed during its 2020 security event.

In relation to this representation, Orrick detected that an unauthorized third party gained access to a portion of its network between February 28 and March 13, 2023, including a file used to store certain client files of EyeMed containing IU Health Plan vision benefit plan members’ information. IU Health Plans first learned of this incident on June 29, 2023, and promptly initiated a review at that time.

Orrick immediately took steps to block the unauthorized access and initiated its response process, including launching an investigation of the incident with the support of a third-party forensics firm. Orrick also notified law enforcement. In addition to these actions, Orrick deployed additional security measures and tools with the guidance of third-party experts to strengthen the ongoing security of its network.

IU Health Plans began notifying affected members on August 31, 2023. The information affected by the Orrick security incident may have included: member name, address, date of birth, phone number, email address, vision insurance account/ID number, health insurance account/ID number, health insurance account/ID number, and full or partial Social Security numbers. IU Health Plans wants to ensure that its information is protected, and Orrick will be offering free credit monitoring to those IU Health Plans members impacted.

If you have any questions, please call toll-free at 866-347-7897, Monday through Friday from 9:00 am to 6:30 pm Eastern Time, excluding major U.S. holidays. Callers who are deaf, hard-of-hearing, or speech-disabled may utilize their TeleTYpewriter (TTY) or Telecommunication Device (TDD) to access an operator at 866-347-7897, Monday through Friday, from 9:00 am to 6:30 pm Eastern Time, excluding major U.S. holidays.