Cierant Data Breach

Cierant's investigation found that an attacker exploited a vulnerability in the third-party Cleo VLTrader product to gain limited access to company systems. The company began an investigation with cybersecurity specialists after detecting the vulnerability on December 10.

Independent incident reporting associates the attack with the CL0P ransomware group. Cierant's own notice confirms exploitation of the VLTrader vulnerability without naming the actor.

The categories varied by person. Disclosed fields included names, addresses, dates of birth, provider names, treatment-related dates, and generic descriptions of services received.

Medical record numbers, health-plan beneficiary numbers, claim numbers, plan-member account numbers, and premium information may also have been involved for some people. Not every category applied to every affected individual.

The HHS Office for Civil Rights incident record reports 232,506 affected individuals. This is the published affected-person total for the event.

Identity, insurance, and health information can make targeted fraud messages more convincing. An unexpected communication containing an accurate claim number, provider name, or service date should still be verified through an independent official channel.

Health-plan and medical-record identifiers can be used in attempted insurance or healthcare fraud. Affected people may benefit from reviewing insurance explanations and medical bills for unfamiliar activity.

Cierant said it worked with outside cybersecurity specialists to investigate the scope and with the relevant health plans to identify potentially affected people. Notification letters were sent and eligible recipients were offered monitoring services.

Notice recipients can regularly review health-insurance statements, medical bills, financial accounts, and credit reports. An unfamiliar healthcare claim or service entry should be reported directly to the insurer or provider.

Before opening a link in a message claiming to concern the incident, recipients should verify the sender through Cierant's or the relevant health plan's official contact channel.