Young Consulting Data Breach: Names and Health Information Exposed

Young Consulting, LLC, a company that provides administrative services to stop-loss insurance carriers, has notified individuals that an unauthorized actor gained access to its network between April 10 and April 13, 2024, and downloaded copies of certain files. Young Consulting first noticed technical difficulties in its computer environment on April 13, 2024, took systems offline to contain the situation, and brought in a cybersecurity forensics firm to investigate. This was a hacking or system intrusion, and it took Young Consulting until January 2025 to finish reviewing the affected files and identify which individuals were impacted and how to reach them.

The letter is addressed to people whose health plan claim information was handled by Young Consulting as part of its work for stop-loss insurance carriers. Because Young Consulting processes claims data on behalf of insurers rather than dealing with the public directly, many recipients may not immediately recognize the company’s name, but that does not make the notice any less relevant to you.

What information was exposed?
  • Full name
  • Health information (from health plan claim files)

Young Consulting is offering twelve (12) months of complimentary credit monitoring through Cyberscout, a TransUnion company. To enroll, log on to www.mytrueidentity.com and follow the prompts, entering the unique enrollment code provided in your mailed letter. Enrollment must be completed within 90 days from the date of the letter, dated January 28, 2025, and Young Consulting notes it cannot activate the service on your behalf.

What should you do now?
  • Enroll in the free 12-month credit monitoring through Cyberscout before the 90-day deadline, since it will not be activated automatically.
  • Because health information was involved, watch closely for unfamiliar medical bills, insurance claims, or collection notices that don’t match care you actually received.
  • Request your free annual credit reports from Equifax, Experian, and TransUnion at annualcreditreport.com and review them for accounts or inquiries you don’t recognize.
  • Consider placing a fraud alert or a credit freeze with the three major credit bureaus; freezes are free and prevent new credit from being opened in your name without your consent.
  • Consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere or is being misused.
  • Keep a copy of the breach letter and any enrollment confirmation in case you need to reference them later when disputing fraudulent activity.
  • If you notice signs of misuse, file a report with local law enforcement and the FTC at identitytheft.gov.

If you have questions, Young Consulting can be reached at 1-833-448-2610 (8:00 am to 8:00 pm Eastern, Monday through Friday, excluding holidays), or by writing to Young Consulting, LLC, 3200 Windy Hill Road SE, Suite 1400W, Atlanta, GA 30339.

Leave a Comment