Cierant Corporation, a Connecticut-based marketing and software services provider, experienced a data breach in December 2024. This incident, involving a vulnerability in the third-party transfer tool VLTrader, impacted personal and health data for 232,506 individuals. Cierant is a vendor to health plans such as Blue Cross Blue Shield of Massachusetts and Horizon Blue Cross Blue Shield of New Jersey, and the breach was confirmed through regulatory reports.
Data types compromised include names, addresses, dates of birth, treatment dates, service descriptions, provider names, medical record numbers, health plan beneficiary numbers, claims numbers, account numbers, and premium information. While medical record numbers and health plan IDs were affected, the involvement of Social Security Numbers or explicit financial data has not been publicly confirmed. The states affected include Connecticut, Massachusetts, New Jersey, and Montana.
Details about this incident may continue to emerge, and further notifications to affected individuals may be delayed.