Almeida Law Group is investigating a data breach at THP Medicare. If you were affected, contact Almeida Law Group.
About THP Medicare
THP Medicare operates the Mount Carmel MediGold brand, a not-for-profit Medicare Advantage health plan serving Medicare beneficiaries in select Ohio counties. The legal entity is Mount Carmel Health Plan, Inc. (Medicare Contract H3668, NAIC #17259), headquartered in Columbus, Ohio. It is a provider-sponsored organization affiliated with the Mount Carmel Health System and Trinity Health, one of the largest Catholic health care systems in the country. The plan offers HMO and PPO products with and without Part D drug coverage.
What Happened?
THP Medicare was listed in a notice published on the organization’s website on September 30th, 2026. According to that notice, Mount Carmel Health Plan Inc. identified suspicious activity on August 7th, 2026 involving an eligibility web portal operated by a third-party vendor called mPulse. An unauthorized party gained access to some of the portal data. Upon discovery, the portal was taken offline and an investigation was launched.
The information that may have been exposed includes members’ names, mailing addresses, phone numbers, dates of birth, member and/or group insurance numbers, and eligibility and coverage status information. The notice explicitly states there is no evidence that Social Security numbers or financial account information were involved. The health plan notified appropriate regulatory authorities, reviewed and strengthened portal security controls, and improved account registration and validation processes. Complimentary credit monitoring is being offered to affected members, and a dedicated call center is available at 833-918-5937, Monday through Friday, 8 a.m. to 8 p.m. Central Time. No independent media reporting or regulatory commentary specific to this incident was found as of the research date.
Key Facts at a Glance
- Company or Organization: Mount Carmel Health Plan, Inc. (doing business as Mount Carmel MediGold / THP Medicare)
- Industry: Health Insurance / Medicare Advantage Health Plan
- Location: Columbus, Ohio
- Incident type: Unauthorized access to third-party vendor eligibility portal (mPulse)
- Date of breach: August 7th, 2026
- Date breach discovered: August 7th, 2026
- Date of consumer notification: September 30th, 2026
- Identity theft protection offered: Complimentary credit monitoring
- Prior breach: None identified for this entity
- Source: Notice of Data Event | THP Medicare; About Us – Mount Carmel MediGold; Mount Carmel Health System – Wikipedia
What Should You Do?
If you received notice that your information was involved, enroll in the complimentary credit monitoring being offered and do so before any stated deadline. Place a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—and review your credit reports at AnnualCreditReport.com. Because health insurance information was involved, carefully review your Explanation of Benefits statements and any healthcare communications for services or plan activity you do not recognize. Report any suspicious activity to your health plan and, if you suspect identity theft, visit IdentityTheft.gov for step-by-step guidance.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
