Health Plans Data Breach Exposes Sensitive Personal Information

Health Plans Inc., a third-party administrator that designs and manages self-funded employee health benefit plans for employers, disclosed a data breach in connection to a vendor called Alegeus, a benefits administration technology provider.

Health Plans helps employers build and run customized health plans, handling services such as claims processing, enrollment, case management, prescription drug programs and other benefits administration. Its clients span industries including hospitals, manufacturing, labor unions, municipalities, credit unions and retail food chains.

The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on Sept. 25, 2026

Key information about the breach, including how it occurred, when it took place and when it was discovered, is not available through current public filings.

The incident may have affected the privacy of some personal health information belonging to affected individuals including Social Security numbers.

Health Plans’ response to the breach

The letter encourages affected individuals to remain vigilant and carefully review their account activity and any related communications. It advises them to contact the company immediately if they notice any activity that appears unfamiliar or suspicious.

Health Plans is offering affected individuals two years of complimentary credit monitoring and identity protection services through IDX. Individuals who received a notification letter can enroll by visiting the IDX enrollment page and using the enrollment code provided in their letter. The enrollment code has an expiration date, which is listed in each individual’s notification.

Health Plans has also established a dedicated customer service line for individuals who have questions about the incident or need assistance. The phone number for this line is included in the notification letters sent to affected individuals.