[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f37tsjiyyhcirx":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":17,"affectedCount":17,"affectedCountStatus":18,"affectedCountLowerBound":19,"affectedCountUnit":20,"hasEnglishDescription":4,"severity":21,"dataClasses":22,"description":28,"seoTitle":29,"seoTitleEn":30,"seoDescription":29,"seoDescriptionEn":31,"logoUrl":32,"isVerified":4,"isSensitive":4,"isSpamList":33,"isMalware":33,"company":34},"6a7146db0b8f0308e5a5c37e","OutcomesOne2025","Outcomes One 2025 Data Breach","outcomes-one-2025","outcomes.com","2025-07-01T00:00:00.000Z","2026-08-04T01:56:43.384Z","Outcomes One consumer notice, HHS OCR, Washington Attorney General, and Texas Attorney General","https:\u002F\u002Fagportal-s3bucket.s3.amazonaws.com\u002Fdatabreach\u002FBreachA34728.pdf",[14,16],"https:\u002F\u002Focrportal.hhs.gov\u002Focr\u002Fbreach\u002Fbreach_report.jsf",257481,"known",null,"people","High",[23,24,25,26,27],"Names","Demographic information","Medical provider names","Health insurance information","Medication information","\u003Cp>\u003Cstrong>The 2025 Outcomes One data breach\u003C\u002Fstrong> involved a phishing attack that compromised an employee email account and made health-plan member information accessible. The U.S. Department of Health and Human Services record reports that 257,481 people were affected.\u003C\u002Fp>\u003Cp>Outcomes One is a health-technology company providing medication therapy management and adherence services for health plans. The company is also known under the Outcomes and OutcomesMTM names.\u003C\u002Fp>\u003Ch2>How did the Outcomes One data breach happen?\u003C\u002Fh2>\u003Cp>The incident was identified on July 1, 2025 when an employee noticed suspicious activity in an email account. The Outcomes security team secured the account and opened an investigation with outside cybersecurity specialists.\u003C\u002Fp>\u003Cp>Unauthorized access lasted approximately one hour and was limited to a single email account. Certain emails and files were accessed during that period; no other email account was found to be involved.\u003C\u002Fp>\u003Ch2>What information may have been affected?\u003C\u002Fh2>\u003Cp>Outcomes determined on July 17, 2025 that an item that may have been accessed included names and, depending on the person, demographic information, medical-provider names, health-insurance information, or medication information.\u003C\u002Fp>\u003Cp>The Outcomes notice explicitly says Social Security numbers were not involved. This does not mean every listed data category was present for every affected person.\u003C\u002Fp>\u003Ch2>How many people were affected?\u003C\u002Fh2>\u003Cp>The HHS healthcare-breach record and an independent breach summary report 257,481 affected individuals. The Texas Attorney General's 256,031 figure reflects a narrower regulator-notification scope; the HHS value is used for the nationwide total.\u003C\u002Fp>\u003Ch2>What risks can this information create?\u003C\u002Fh2>\u003Cp>Health-insurance, medication, and provider details can help an attacker create targeted messages that appear to refer to a genuine health plan or treatment relationship.\u003C\u002Fp>\u003Cp>An attacker may use a prescription renewal, insurance coverage, or healthcare payment as a pretext to request personal or payment information. Accurate health details in a message do not prove the sender is authorized.\u003C\u002Fp>\u003Ch2>How did Outcomes One respond?\u003C\u002Fh2>\u003Cp>Outcomes secured the affected account, investigated with outside specialists, and said it implemented additional email safeguards and employee phishing training.\u003C\u002Fp>\u003Cp>The company began notifying data owners on July 25 and mailed individual notices beginning September 23, 2025. A dedicated incident-response line was established for questions.\u003C\u002Fp>\u003Ch2>What should affected people do?\u003C\u002Fh2>\u003Cp>Notice recipients can review health-plan statements, prescription histories, and medical bills for unfamiliar activity. If they see a service or medication they did not receive, they can contact their health plan directly.\u003C\u002Fp>\u003Cp>For an unexpected message claiming to come from Outcomes, Aetna, a pharmacy, or a healthcare professional, use the organization's official contact channel before following a link. Do not share a password, payment detail, or verification code.\u003C\u002Fp>","","Outcomes One Data Breach (257.5 Thousand People Affected)","The Outcomes One data breach affected 257,481 people and may have exposed health-insurance and medication information.","\u002Fuploads\u002Flogo\u002Foutcomes-one.png",false,{"name":35,"sector":36,"country":37,"website":38,"websiteArchiveUrl":29,"websiteStatus":29,"websiteCheckedAt":19},"Outcomes One","Healthcare","United States","https:\u002F\u002Fwww.outcomes.com\u002F"]