Outcomes One, Inc. reported that on July 1, 2025, a phishing attack allowed an outsider to briefly access an employee’s email account. Even though the access lasted only about an hour, that was enough time for private information to be exposed. While Outcomes has said the breach was limited to one account, the impact reaches thousands of individuals who now face the risk of their sensitive details being misused.
Could Your Private & Sensitive Information Be At Risk?
During the investigation, Outcomes found that the account may have contained personal details connected to Aetna members. Information that could have been exposed includes:
- Your name
- Demographic details
- Medical provider name
- Health insurance information
- Medication information
While Social Security Numbers (SSNs) were not part of this breach, the compromised details can still put your privacy and security at risk.
How Did Outcomes Respond?
After the breach was discovered, Outcomes secured the account, hired outside experts, and began working with Aetna to notify affected individuals. Notification letters were mailed beginning September 23, 2025, to 3,477 residents in Washington state. The company has also promised stronger employee training and new email security measures.
What This Means for You
If your data was part of this incident, it is important to stay alert. This means taking the following actions:
- Review all statements from your health plan and providers
- Report any unfamiliar charges or services immediately
- Keep an eye on communications that may use your health details to trick you further
Remember, even though your SSN might not have not exposed, health and insurance information is still sensitive and valuable to criminals and hackers.
Do You Have Any Legal Options?
Yes. Our data breach attorneys understand that a data breach of any magnitude can create real stress and financial risk. No one should have to worry about their private health and insurance information falling into the wrong hands.
As experienced data breach lawyers, we know how to investigate how the incident happened, hold companies accountable for failing to safeguard information, and pursue compensation for the harm caused. Our team can also guide you through protecting yourselves against fraud, identity theft, and future misuse of their data. If you were impacted by the Outcomes One, Inc. data breach, take action now to protect yourself.
