Allwell from Arkansas Health & Wellness received information that one of our business partners was a victim of a cyber-attack

Date: 06/15/21

Arkansas Health & Wellness is committed to protecting the privacy and security of our members’ information. On January 25, 2021, one of our vendors, Accellion, informed us that it was the victim of a cyber attack that compromised its file transfer platform, and allowed a malicious party to view or download data files from January 7 to January 20, 2021.  On April 2, 2021, our investigation identified that the personal information of Arkansas Health & Wellness members was involved in this incident. We have mailed a letter and provided resources to all members whose information was involved in this incident.

The personal information involved in this incident includes name, and one or more of following: address, date of birth, insurance ID number, health information such as medical condition(s) and treatment information.

We have no indications of inappropriate use of members’ information.  However, out of an abundance of caution we recommend that potentially affected members take reasonable steps to ensure the security of their information.

We are providing members affected by this incident with one-year of free credit monitoring and identity theft protection services. Instructions on how to enroll in this service were included in the letter sent to affected individuals.

We have also shared a reference guide of recommendations from the Federal Trade Commission regarding identity theft including information on how to request free credit reports, security freezes and fraud alerts.

Upon discovering this incident, we took the following actions to correct this issue and prevent it from reoccurring:

• We immediately conducted an investigation into the incident and ceased using Accellion’s services.
• We have reviewed our file transfer processes and tools to ensure that they are not at risk of a similar attack.
• We have removed all of our data files from Accellion’s systems.

Accellion is coordinating their response with the appropriate law enforcement authorities.

Arkansas Health & Wellness takes the responsibility of protecting our members’ personal information very seriously. We sincerely regret any concern or inconvenience this incident may have caused our members and their families. If you have any questions, or would like additional information, please call 1-800-294-3557.