Sutherland Healthcare Solutions Data Breach: Stand-In Worker Accessed Claims Data

In letters dated November 2, 2026, Sutherland Healthcare Solutions, which provides business process services to health care organizations, says the incident happened during claims processing it performs for health insurance companies. According to the letter, an unauthorized individual “acted on behalf of a Sutherland employee” at various points between July 29, 2024, and July 10, 2026.

Sutherland says it promptly ended that employee’s access rights and began investigating. After notifying the health insurers involved, it worked with them to identify the people and data affected, a determination it says it reached on or about August 24, 2026.

The company also says that, by all appearances, the unauthorized worker wasn’t acting maliciously and accessed only relevant information while doing the tasks the actual employee was supposed to do. Sutherland says it is cooperating with law enforcement.

The letter says the records the worker could reach include names, addresses, genders, dates of birth, health plan information and member IDs, Social Security numbers, and health insurance claims data, such as health care providers, dates of service, and diagnosis, procedure, and treatment information. It says the records did not include financial account numbers.

Sutherland says it hasn’t found any evidence of actual or attempted misuse of the information. Massachusetts’ 2026 breach report lists Social Security numbers among the data for the residents notified there.

The letters go to people whose claims Sutherland processed for their health insurance company. The public copy of the letter doesn’t name the insurer involved.

Sutherland hasn’t published how many people were affected. The only count we found comes from Massachusetts, which lists 6 residents in its 2026 breach report. As of November 4, 2026, we found no Sutherland filing for this incident with the attorneys general of California, Texas, or Vermont, and none on the federal HHS breach list, whose latest entries date from October 9. Health insurers may report incidents like this under their own names.

Sutherland is offering IDX identity protection that includes credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services. Enrollment closes February 2, 2027, and your enrollment code is printed on your letter. The letter doesn’t say how long the services last.

The credit monitoring has to be activated separately to work, and it requires established credit and access to a computer and the internet. Sutherland says it is reviewing and updating its processes and adding technical and administrative measures to reduce the chance of a similar incident.

The letters are dated nearly four months after the access window closed and 70 days after Sutherland says it identified the people involved. The letter states that law enforcement didn’t ask Sutherland to delay notice.

Because claims records with diagnoses and Social Security numbers were accessible, these steps cover both your health plan and your credit:

• Enroll in IDX by February 2, 2027, and activate the credit monitoring. The letter says the monitoring doesn’t take effect until it’s activated.
• Compare your explanation of benefits statements with your own records. Look for providers, dates of service, or treatments you don’t recognize.
• Freeze your credit at Equifax, Experian, and TransUnion. The letter notes there’s no fee to place, lift, or remove a freeze and that each bureau needs its own request.
• Consider a fraud alert as another option. Contacting one bureau is enough, because that bureau has to notify the other two.
• Be cautious with unexpected calls about your claims or benefits. Scammers may mention a breach to ask for a member ID or Social Security number, so verify any outreach independently before responding.

These are general suggestions rather than legal advice, and the right steps for you may differ. A legal professional can tell you which of them matter most in your case.

Did a Sutherland Healthcare Solutions letter say your claims records and Social Security number were open to an unauthorized worker? Wilshire Law Firm is headquartered in California and handles data breach and consumer protection class actions nationwide. Health data incidents at claims vendors are sometimes pursued as class actions. Our nationally recognized, award-winning team offers a free consultation or free case review with a legal professional, available 24/7, and there are no fees unless you get paid.

Contact Wilshire Law Firm to talk about your Sutherland letter.