Notice to Foundation 1 Customers
Notice of Data Breach
Some American Fidelity plans administered by Foundation 1 are serviced by WebTPA Employer Services, LLC. WebTPA Employer Services, LLC recently experienced a data security incident. While American Fidelity's own systems were not impacted, we wanted to let our Foundation 1 customers know about this event that may have affected their data.
On December 28, 2023, WebTPA detected evidence of suspicious activity on their network that prompted them to launch an investigation. Upon detecting the incident, WebTPA promptly initiated measures to mitigate the threat and further secure their network. They also launched an investigation with the support of industry leading third-party cybersecurity experts and notified federal law enforcement. The investigation concluded that the unauthorized actor may have obtained personal information between April 18 and April 23, 2023. WebTPA promptly informed benefit plans about the incident and the potential exposure of personal information. WebTPA then diligently worked to confirm the extent of impacted data, which they provided to benefit plans on March 25, 2024.
The information that may have been impacted includes: name, address, date of birth, Social Security number, and policy number. Not every data element was present for every individual. Financial information, such as financial account information or credit card numbers, was not impacted in this incident.
WebTPA is offering individuals two years of complimentary identity monitoring services through Kroll. They also deployed additional security measures and tools with the guidance of third-party cybersecurity experts to further strengthen the security of their network.
WebTPA is not aware of any misuse of benefit plan member information as a result of this incident. Nonetheless, it is always advisable to remain vigilant against attempts at identity theft or fraud, which includes carefully reviewing credit reports and Explanations of Benefits (EOBs) from your benefit plans for suspicious activity. If you identify suspicious activity, you should contact the entity that maintains the information on your behalf.
WebTPA has established a dedicated call center to answer questions. If you have any questions regarding this incident, please call 866-495-9179 Monday through Friday from 9:00 a.m. to 6:30 p.m. Eastern Time, excluding major U.S. holidays.