KERN Agency

KERN Agency is a vendor that provides managed file transfer services, specifically using the MOVEit platform, to healthcare organizations such as Premera Blue Cross. It handles protected health information, including data related to Medicare Advantage members, as part of its service offerings. The company is headquartered in the United States and operates under the alias KERN Agency. Its core function involves facilitating secure movement of files containing sensitive health data between entities.

In June 2023, a cybersecurity incident affected KERN Agency when a vulnerability in its MOVEit software was exploited, leading to unauthorized access and exfiltration of stored files containing protected health information of some Medicare Advantage members. The breach did not compromise claims data, financial details, or Social Security numbers of the affected individuals. KERN Agency contained the incident, preventing further system compromise, and notified the impacted members. The health plan, Premera Blue Cross, collaborated with the vendor to implement remediation measures following the event. The incident underscores the organization's role as a business associate handling HIPAA‑covered information and its responsibility to safeguard such data. While specific details about the company's size, ownership structure, or broader market footprint are not publicly disclosed in the available sources, its involvement with a major health insurer indicates a focus on serving the healthcare sector.