Health Prime International Data Breach Investigation
Health Prime International reported a data security event involving protected health information held by Tebra Technologies, a third-party platform. The information under review may include names, addresses, Social Security numbers, dates of birth, medical information, and health insurance information. The review remained ongoing, and the number of potentially affected people was not disclosed. Strauss Borrelli PLLC is investigating the Health Prime International data incident; potentially affected individuals may use the secure contact form on this page to ask whether they may qualify to pursue a claim.
Key Facts at a Glance
- Entity Involved: Health Prime International (Information Technology)
- Incident Type: Reported hacking/IT incident involving a third-party platform
- Date of Incident: Not specified in the available notice
- Discovery Date: August 3, 2026
- Official Notice Date: Not specified in the available materials
- Exposed Information: Names, addresses, Social Security numbers, dates of birth, medical information, and health insurance information may have been involved
- Affected Population: Under investigation
What Happened?
According to Health Prime International’s (HPI) consumer notice, the company learned on August 3, 2026, that an unknown actor claimed to have accessed and acquired protected health information relating to certain patients. The information was held by Tebra Technologies, a third-party platform used by HPI. The notice does not specify when the claimed access began or ended.
HPI said it began an investigation with third-party forensic specialists to evaluate system security and determine the nature and scope of the activity. At the time of the notice, the investigation and review of potentially affected files remained ongoing. HPI also stated that it was not aware of actual or attempted identity fraud related to the event. The company reported that it planned to mail letters after identifying individuals whose protected information was contained in the files at issue and for whom it had valid mailing addresses. The total affected population and a formal notification date were not disclosed in the materials provided.
What Information Was Exposed?
HPI’s notice says the affected data types were still being reviewed and may vary by person. The potentially involved information may include:
- Full names and addresses
- Social Security numbers
- Dates of birth
- Medical or health information
- Health insurance information
This combination of personal and healthcare data may create risks beyond ordinary financial identity theft. Criminals could potentially use it for fraudulent patient billing, medical identity theft, false insurance claims, prescription-related inquiries, or phishing messages disguised as insurance verification requests. The notice does not establish that every listed category was involved for every person.
What Should You Do Next?
- Review healthcare records: Examine explanations of benefits, patient portal activity, insurance claims, prescription records, and provider bills for services or medications you do not recognize. Report suspicious entries to the insurer and healthcare provider promptly.
- Check your credit reports: Obtain reports from Equifax, Experian, and TransUnion through AnnualCreditReport.com. Look for unfamiliar accounts, addresses, credit inquiries, or collection activity that could indicate identity misuse.
- Consider a fraud alert or credit freeze: A fraud alert asks potential creditors to verify your identity, while a credit freeze generally restricts access to your credit file. Federal law allows consumers to place and lift freezes without charge.
- Be alert for healthcare phishing: Treat unexpected calls, emails, or text messages requesting insurance numbers, Social Security numbers, passwords, payment, or prescription details with caution. Verify requests through a provider’s or insurer’s official contact information.
- Preserve relevant documents: Keep the notice letter, envelopes, emails, unusual bills, credit reports, and records of time or money spent responding. These materials may help document the incident and any resulting losses.
Your Legal Rights
People whose information may have been involved could have rights under federal or state privacy, consumer-protection, healthcare, or data-notification laws. Available rights and potential claims depend on factors such as where the person lives, what information was involved, whether adequate safeguards and notice were provided, and whether the incident caused documented harm or expenses.
Potentially affected individuals may consider preserving their notice and related records, monitoring for misuse, and speaking with a qualified data privacy attorney about applicable options. Legal deadlines can vary by jurisdiction and claim. Receiving a notice does not automatically establish liability or guarantee compensation, and this general information is not individualized legal advice.
Why Hire Strauss Borrelli PLLC?
Strauss Borrelli PLLC represents individuals in privacy and data security matters and can evaluate available notices, the categories of information potentially involved, and documented consequences of an incident. A confidential consultation can help an affected person understand possible options and determine whether further investigation may be appropriate.
If you received a breach notification letter from Health Prime International:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
