On July 25, 2023, UnitedHealthcare Student Resources (“Student Resources”) filed a notice of data breach with the Attorney General of Texas after discovering that an unauthorized party was able to access confidential information stored on the organization’s MOVEit server resulting from a vulnerability in the MOVEit application. In this notice, Student Resources explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers, dates of birth, addresses, phone numbers, email addresses, health insurance information, student identification numbers, protected health information and financial information. Upon completing its investigation, Student Resources began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from UnitedHealthcare Student Resources, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the UnitedHealthcare Student Resources data breach. For more information, please see our recent piece on the topic here.

What Caused the UnitedHealthcare Student Resources Breach?

The UnitedHealthcare Student Resources data breach was only recently announced, and more information is expected in the near future. However, Student Resources’ filing with the Attorney General of Texas provides some important information on what led up to the breach. According to this source, Student Resources uses a secure file transfer application called MOVEit, which was created by Progress Software. On May 31, 2023, Progress Software announced it discovered a previously unknown vulnerability in MOVEit that could allow an unauthorized third party to access files sent with the software.

After learning of the vulnerability, Student Resources launched an investigation, confirming that an unauthorized third party was able to access certain systems and remove copies of personal information from the organization’s MOVEit server on May 27, 2023.

After learning that sensitive consumer data was accessible to an unauthorized party, UnitedHealthcare Student Resources reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, date of birth, address, phone number, email address, health insurance information, student identification number, protected health information and financial information.

On July 21, 2023, UnitedHealthcare Student Resources sent out data breach letters to anyone who was affected by the recent data security incident.

More Information About UnitedHealthcare Student Resources

Founded in 1987, UnitedHealthcare Student Resources is an insurance company that provides various insurance products to students. UnitedHealthcare Student Resources is an operating division of UnitedHealth Group, the largest health insurance company in the United States. UnitedHealthcare Student Resources employs more than 157 people and generates approximately $62 million in annual revenue.