Point32Health, the parent company of Harvard Pilgrim Health Care and Tufts Health Plan, identified the “cybersecurity ransomware incident” on April 2023. Point32Health shut down several systems to contain the danger after realizing that an "unauthorized party" had gained access to these systems. In advance and "out of an abundance of caution. The main concern is making sure that members can still obtain care. The team is working around the clock to provide workarounds so that members still access the services they require while we actively strive to restore the disrupted systems as swiftly and safely as possible.

Harvard Pilgrim Health Care suffered a significant data breach due to external hacking between March 28, 2023, and April 17, 2023, compromising the personal and financial information of 2,632,275 individuals, including 993 Maine residents. The exposed data may include names, Social Security numbers, and financial account details, heightening the risk of identity theft and financial fraud. In response, the company offered two years of identity theft protection services via IDX to affected individuals. The breach was reported to the Maine Office of the Attorney General on February 15, 2024, underscoring the severity of the incident and its potential long-term consequences for customers, including fraud, financial loss, and reputational harm to the organization.