OneDigital

OneDigital, also known by its alias OneDigital, is an organization headquartered in the United States of America. It functions as a business associate for health plans, which means it handles protected health information on behalf of its clients. The organization’s primary role involves accessing and managing personal health data as part of its service offerings. Being based in the United States subjects it to federal health privacy regulations such as HIPAA. Its status as a business associate defines its operational scope within the healthcare sector.

On January 1, 2021, OneDigital experienced a cybersecurity incident when unauthorized actors gained access to its network. The breach potentially exposed the protected health information of approximately 2,003 individuals who were members of Anthem Inc. The compromised data included names, addresses, Social Security numbers, dates of birth, and medical records. Upon discovering the incident, OneDigital notified the affected individuals and offered them complimentary credit monitoring and identity theft protection services for one year. In response to the breach, the organization conducted an investigation and implemented process improvements to reduce the likelihood of similar events in the future.

As a business associate, OneDigital is required to adhere to the safeguards and breach notification rules established under the Health Insurance Portability and Accountability Act. Its involvement with Anthem’s member data illustrates its specialization in handling sensitive health information for large health insurers. The 2021 incident highlighted the importance of robust security controls for organizations that manage PHI on behalf of others. While the organization has taken steps to strengthen its security posture after the breach, no further details about its ownership, parent company, or overall size are publicly available in the provided sources.