Notice of a Data Security Incident

CCA Health California is committed to protecting the security and privacy of the information we maintain. On November 15, 2022, we began mailing notification letters to current and former members whose information may have been involved in a security incident that disrupted the operations of some of our IT systems. The incident disrupted the IT systems of the former Vitality Health Plan of California, now owned by CCA Health California.

We first identified the incident on September 16, 2022, and immediately took steps to secure our systems, launched an investigation with the assistance of a third-party forensic investigator, and notified law enforcement. The investigation determined that an unauthorized party accessed some of our systems between May 4, 2022, and September 16, 2022, and removed some files. The incident is limited to the IT systems for CCA Health California.

All of the specific files that may have been accessed or removed could not be determined, so we could not rule out the possibility that files containing certain CCA Health California member information identified here may have been involved. The member information may have included some or all of the following: names, contact information, demographic information, dates of birth, Social Security numbers, passport numbers, diagnosis and treatment information, prescription information, Medical Record Numbers, laboratory test results, provider names, dates of service, and/or health insurance and plan member information, including member ID number.

CCA Health California recommends that its members review the statements related to their health plan to ensure they reflect the services received. Additionally, we are offering complimentary credit monitoring and identity protection services through Experian to current and former members whose Social Security numbers may have been involved.

We take this incident very seriously and sincerely regret any concerns this may cause. To help prevent something like this from happening again, CCA Health California has enhanced our existing security safeguards, monitoring capabilities and technical measures to further protect and monitor our systems. A dedicated call center has been established to answer questions about this incident, which can be reached at (855) 532-0212 Monday through Friday, between 6:00 a.m. and 3:30 p.m. Pacific Time, excluding major U.S. holidays.