Quick answer: The Law Enforcement Health Benefits incident was a historical ransomware event affecting a benefits organization serving the law-enforcement community. Recovery of access and protection of potentially exposed personal information are separate concerns.
What the notification letter confirms
LEHB’s letter states that ransomware began encrypting files on September 14, 2021. After investigation, it discovered on February 25, 2022 that certain impacted files containing personal information may have been removed. Use an individual notice to determine which information was identified for a particular person; do not assume that every listed data category applied to everyone.
Watch Matt Barnett’s NBC10 discussion
Steps for people receiving a breach notice
- Verify the notice using the organization’s official contact information.
- Review the specific data categories and any available support; historical enrollment offers may have expired.
- Review financial and benefits statements for unfamiliar activity.
- Consider the FTC’s guidance on credit freezes and fraud alerts. A freeze helps restrict new-account credit access; it does not prevent every form of identity misuse.
- Be skeptical of follow-up calls or messages asking for credentials, payments, or verification codes.
Frequently asked questions
When did LEHB detect the ransomware incident?
LEHB’s notification letter says it detected ransomware encrypting network files on September 14, 2021. Its investigation identified possible removal of personal-information files on February 25, 2022.
Does restoring encrypted files eliminate identity-theft risk?
No. Restoring access does not establish that copied information was deleted. Follow your individual notice and monitor for misuse of the information identified there.
