Select Health Network
| Primary URL | Location | Industry | www[.]selecthealth[.]org |
Country
United States of America
|
Healthcare
|
|---|
Profile
Select Health Network, also known as Select Health or SelectHealth, is a United States-based health network that provides health insurance and related services. The organization manages sensitive personal and health information for its members, patients, and healthcare providers, operating within the U.S. healthcare sector. Its core function involves the administration of health insurance details and the handling of protected health information, including medical histories and treatment data. The network serves a population that includes current and former members, patients, and its own employees, indicating a broad stakeholder base within the healthcare ecosystem. While the precise scale of its operations is not disclosed, its activities place it squarely within the regulated health insurance and provider space, subject to standards governing the privacy and security of personal health data.
A defining incident in the organization's recent history occurred in May 2019 when unauthorized actors gained access to multiple employee email accounts over several weeks. This security event potentially exposed a wide array of sensitive data, including names, addresses, dates of birth, member identification numbers, health insurance specifics, and detailed medical histories and treatment information. For some individuals, Social Security numbers were also compromised, though the breach explicitly did not involve any financial account data. Upon detecting suspicious activity, Select Health Network promptly secured the affected accounts and engaged external forensic investigators to conduct a comprehensive audit. This investigation concluded with no evidence that the accessed information was actually misused. The organization subsequently initiated a process to notify all impacted individuals, which included both current and former members, patients, and employees, though the total number of affected persons was never publicly specified. This incident underscores the organization's role as a custodian of highly sensitive health information and its established protocol for responding to and investigating a data security breach.
