Outcomes One, Inc., a company that works with health plans to provide medication therapy management and medication adherence services, has notified individuals about a phishing attack that compromised an employee’s email account. According to the company, an employee noticed suspicious activity on July 1, 2025, and reported it to Outcomes’ security team, which secured the account and brought in outside specialists to investigate. The unauthorized access to the account lasted approximately one hour, but during that window, various files and emails were viewed. Outcomes states that no other employee email accounts were affected.
The letter was sent to people whose health plan later determined that their personal information was contained in the accessed files and emails. Because Outcomes works on behalf of health plans rather than directly with the public, this notice may be the first indication some recipients have that their data passed through this company at all. Outcomes has not stated a total number of individuals affected in the portion of the notice provided.
What information was exposed?
- Full name
- Date of birth
- Gender
- Phone number
- State of residence
- Health plan name
- Service date
- Health care ID number
- Diagnosis information
- Other medication information
Outcomes specifically notes that Social Security numbers were not involved in this incident. No free credit monitoring or identity protection service was mentioned in the notice provided.
What should you do now?
- Carefully review any statements or explanation-of-benefits notices from your health plan or health care providers, and report any charges for services or medications you did not receive.
- Keep a copy of this notification letter in case you need to reference it later when disputing charges or discussing your records with your health plan.
- Watch for unexpected mail, calls, or bills related to medical services, since diagnosis and medication information can sometimes be misused for insurance or medical identity fraud.
- Since demographic and health details were involved, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere.
- Be cautious of unsolicited emails, calls, or texts referencing your health plan or medical history, as scammers sometimes use breach details to make phishing attempts look legitimate.
- Contact your health plan directly if you notice anything unusual in your coverage records or if you have questions about how your specific information was handled.
If you have questions, Outcomes can be reached at 877-332-1681, Monday through Friday, 9:00 AM to 9:00 PM Eastern Time, except for major U.S. holidays.