On February 9, 2024, Signature Performance, Inc., a healthcare administrative solutions provider based in Omaha, filed a notice of data breach with the Attorney General of Montana after discovering unauthorized access to its IT network. The incident resulted in the exposure of consumers’ sensitive information, prompting the company to initiate data breach notification procedures.
According to Signature Performance’s filing, suspicious activity within its IT network was detected on January 18, 2024. Upon discovery, the company promptly notified law enforcement and engaged third-party cybersecurity specialists to investigate the matter. The investigation confirmed unauthorized access to the computer network between January 17 and January 18, 2024, with certain files containing confidential consumer information among those accessed.
Following the discovery of the breach, Signature Performance conducted a thorough review of compromised files to assess the extent of the data leak and identify affected consumers. While the company continues to review all compromised data, it has confirmed that sensitive information belonging to certain consumers was subject to unauthorized access.
On February 9, 2024, Signature Performance commenced sending out data breach notification letters to individuals impacted by the incident. Although the publicly available letter on the Montana Attorney General’s website does not specify the compromised information, personalized breach notifications sent to affected individuals should provide details on the compromised data.
Founded in 2004, Signature Performance, Inc. specializes in healthcare administrative solutions and services, offering customized healthcare plans and health IT consulting. Processing over 1.5 million claims monthly, the company has recovered over $1 billion in revenue for clients. With a workforce of over 1,500 employees, Signature Performance generates approximately $317 million in annual revenue.
