WPS Health Insurance Company Cyber Security Posture
wpshealth.comWPS Health Insurance is based in Madison, Wis., and is deeply committed to Wisconsin and its citizens. One of the largest health benefits providers in the state, WPS remains not-for-profit and offers health plans to the public and private sectors. WPS offers Preferred Provider Organization (PPO) health plans for individuals and groups, including high-deductible health plan (HDHP) options that allow the use of Health Savings Accounts (HSAs). WPS also has Medicare supplement plans available for individuals who are eligible for Medicare. WPS contracts with health care providers across the state to provide comprehensive provider networks that include the physicians, specialists, clinics, and hospitals that our customers know and trust. We also offer national networks to cover out-of-state health care needs.
WHI Company Details
wps-health-insurance
1215 employees
8437.0
524
Insurance
wpshealth.com
4
WPS_1185165
In-progress
WHI Risk Score (AI oriented)Between 800 and 900
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.
WHI Global Score.png)
WPS Health Insurance Company Scoring based on AI Models
| Model Name | Date | Description | Current Score Difference | Score |
|---|---|---|---|---|
| AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 800 and 900 |
WPS Health Insurance Company Cyber Security News & History
| Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
|---|---|---|---|---|---|---|---|
| Wisconsin Physicians Service Insurance Corporation (WPS) | Vulnerability | 85 | 4 | 9/2024 | WPS000091024 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: The Centers for Medicare & Medicaid Services (CMS) and WPS announced a security breach stemming from a vulnerability in the MOVEit software by Progress Software. Unauthorized access was gained to PII of Medicare beneficiaries, affecting Medicare claim management and CMS audits of healthcare providers. This incident, which took place between May 27 and May 31, 2023, compromised personal data for 946,801 individuals. | |||||||
| Wisconsin Physicians Service Insurance Corporation | Vulnerability | 85 | 4 | 9/2024 | WPS001103024 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: WPS, a contractor for the Centers for Medicare & Medicaid Services (CMS), experienced a data breach due to a vulnerability in the MOVEit software used for transferring files. This incident, occurring between May 27 and May 31, 2023, potentially compromised the personally identifiable information (PII) of Medicare beneficiaries, related to Medicare claims management, and PII supporting CMS audits of healthcare providers. Approximately 946,801 individuals are affected and notifications are being sent to those whose information was at risk. The breach was disclosed to CMS on July 8, following the discovery of the unauthorized access to personal data. | |||||||
| Wisconsin Physicians Service Insurance Corporation (WPS) | Vulnerability | 85 | 4 | 9/2024 | WPS001032825 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: WPS, in conjunction with the CMS, is notifying individuals of a data breach due to a vulnerability in the MOVEit software developed by Progress Software. This breach occurred between May 27 and May 31, 2023, and compromised the PII of Medicare beneficiaries. The exposed data was collected for managing Medicare claims and supporting CMS audits of healthcare providers. This affected PII includes individuals who are not Medicare beneficiaries but have received healthcare services. A total of 946,801 people were notified of the potential leak of their personal information. | |||||||
| Wisconsin Physicians Service Insurance Corporation (WPS) | Vulnerability | 85 | 4 | 9/2024 | WPS001040125 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: The notification from CMS revealed that due to a security vulnerability in the MOVEit software, unauthorized third parties gained access to the personal information (PII) of 946,801 Medicare beneficiaries. The breach occurred between May 27 and May 31, 2023, and impacted data related to Medicare claims management and CMS audits. The breach was reported to CMS on July 8, and affected individuals are being notified of the potential compromise of their PII. | |||||||
| Wisconsin Physicians Service Insurance Corporation (WPS) | Vulnerability | 85 | 4 | 9/2024 | WPS001040625 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: A security breach occurred involving the MOVEit software used by WPS for handling Medicare administrative services, resulting in unauthorized access to personal information. The breach, dating from May 27 to May 31, 2023, compromised the protected health information (PHI) of Medicare beneficiaries managed for claim purposes and personal identifiable information (PII) supporting CMS audits. Notifications were issued to the affected 946,801 individuals after WPS informed CMS of the breach on July 8. | |||||||
| Wisconsin Physicians Service Insurance Corporation (WPS) | Vulnerability | 85 | 4 | 9/2024 | WPS001040725 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: WPS, in connection with its Medicare administrative services, reported a security breach due to a vulnerability in the MOVEit software provided by Progress Software. This incident potentially compromised the protected health information (PHI) of 946,801 Medicare beneficiaries, including data essential for managing Medicare claims and supporting CMS audits. Unauthorized access occurred between May 27 and May 31, 2023, was discovered later, and notifications to affected individuals commenced following the breach acknowledgment. | |||||||
| Wisconsin Physicians Service Insurance Corporation (WPS) | Vulnerability | 100 | 4 | 9/2024 | WPS001041025 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: WPS, working with CMS, has begun notifying nearly a million individuals affected by a breach concerning their protected health information. This was due to a security flaw in MOVEit software developed by Progress Software, leading to unauthorized access of Medicare beneficiary PII during file transfers for Medicare claim management and CMS healthcare provider audits. The breach occurred from May 27 to 31, 2023, with WPS informing CMS on July 8. 946,801 Medicare recipients are receiving notifications of this compromise of their personal data. | |||||||
| Wisconsin Physicians Service Insurance Corporation (WPS) | Vulnerability | 100 | 4 | 9/2024 | WPS001041225 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: A security vulnerability in the MOVEit software, developed by Progress Software and used by WPS to transfer files in the provision of services to CMS, led to unauthorized access of personal information. Between May 27 and May 31, 2023, personally identifiable information (PII) of Medicare beneficiaries—collected for managing Medicare claims and CMS audits of healthcare providers—was compromised, affecting up to 946,801 individuals. WPS discovered and reported the breach to CMS, initiating notifications to the impacted parties. | |||||||
WPS Health Insurance Company Subsidiaries
WPS Health Insurance is based in Madison, Wis., and is deeply committed to Wisconsin and its citizens. One of the largest health benefits providers in the state, WPS remains not-for-profit and offers health plans to the public and private sectors. WPS offers Preferred Provider Organization (PPO) health plans for individuals and groups, including high-deductible health plan (HDHP) options that allow the use of Health Savings Accounts (HSAs). WPS also has Medicare supplement plans available for individuals who are eligible for Medicare. WPS contracts with health care providers across the state to provide comprehensive provider networks that include the physicians, specialists, clinics, and hospitals that our customers know and trust. We also offer national networks to cover out-of-state health care needs.
Access Data Using Our API
Get company history
Rapid.png)
WHI Cyber Security News
Health Care: Cyber Attacks, Worrying Trends and Solutions
Cyber threats against hospitals are surging. What steps are being taken by the health-care sector to address the increasing impacts of cyber ...
CMS Confirms 3.1 Million Individuals Affected by MOVEit Hack on Wisconsin Physicians Service
The Department of Health and Human Services (HHS) Centers for Medicare and Medicaid Services (CMS) has reported a data breach to the HHS ...
CMS Notifies People Potentially Impacted by Data Breach
CMS stated that a vulnerability in the MOVEit software allowed unauthorized third parties to access personal information transferred using ...
More than 3 million Medicare users had information leaked in MOVEit breach
Sensitive information belonging to 3.1 million people across several states was breached during the cybercriminal campaign last year that targeted the popular ...
10 largest healthcare data breaches of 2024
Learn about the 10 largest healthcare data breaches reported to OCR in 2024, which collectively affected more than 137 million individuals.
CMS Notifies Individuals Potentially Impacted by Data Breach
The notification comes following discovery of a security vulnerability in the MOVEit software, a third-party application developed by Progress ...
CMS acknowledges 2023 cybersecurity hack of Medicare contractor
The U.S. Centers for Medicare & Medicaid Services posted a Sept. 6 statement regarding a cyber incident involving nearly 950000 patient ...
900,000 Americans on Medicare Warned of Data Breach
More than 900,000 people in the country with Medicare have been warned that their personal information may have been stolen after a data breach ...
The Biggest Healthcare Data Breaches of 2024
Last year was an annus horribilis for healthcare data breaches. While there appears to have been a slight year-over-year reduction in the ...
WHI Similar Companies
Pragati Life Insurance Limited
Pragati Life Insurance Limited was established on January 30, 2000 as a public limited company under the Companies Act, 1994 with the philosophy of maintaining competitiveness, balanced with prudent management and fairness to all policyholders. The company obtained registration from the Department o
Gruppo Unipol
Unipol Group is one of the leading insurance groups in Europe and the leader in Italy in Non-Life business (particularly in Motor and Health), with total premium income of 15.1 billion euros, including 8.7 billion in Non-Life business and 6.4 billion in Life business (2023 figures). Unipol adopts an
Rosgosstrakh
RGS operates nationwide with over 2,500 branches, agencies and over 400 claims-handling offices covering every one of Russia's 86 regions - from Kaliningrad on the Baltic Sea in the West to Kamchatka on the Pacific Ocean in the Far East, and from Murmansk on the Barents Sea to Sochi (2014 Winter Oly
Munich Re
Munich Re is one of the world’s leading providers of reinsurance, primary insurance and insurance-related risk solutions. The group consists of the reinsurance and ERGO business segments, as well as the capital investment company MEAG. We are globally active and operate in all lines of the insurance
Sompo Group
Tracing our roots back to the first fire insurance company in Japan over 130 years ago, Sompo Holdings today leads a group of companies operating across different industries and geographies. The Sompo Group provides solutions in P&C insurance globally and life insurance and nursing care in Japan to
Groupama
« Etre là pour les autres, j'ai décidé d'en faire mon métier. » Portée par nos 32 000 collaborateurs, notre campagne de communication employeur souligne ce qui nous rassemble et nous rend fiers au quotidien : notre métier, le point de départ de belles histoires, humaines avant tout. Cette
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
WHI CyberSecurity History Information
How many cyber incidents has WHI faced?
Total Incidents: According to Rankiteo, WHI has faced 8 incidents in the past.
What types of cybersecurity incidents have occurred at WHI?
Incident Types: The types of cybersecurity incidents that have occurred incidents Vulnerability.
How does WHI detect and respond to cybersecurity incidents?
Detection and Response: The company detects and responds to cybersecurity incidents through communication strategy with Notifications to impacted parties and communication strategy with Notifying affected individuals and communication strategy with Notifications to affected individuals and communication strategy with Notifying affected individuals and communication strategy with Notifications sent to affected individuals.
Incident Details
Can you provide details on each incident?
Incident : Data Breach
Title: MOVEit Software Vulnerability Leads to Unauthorized Access of Medicare Beneficiaries' PII
Description: A security vulnerability in the MOVEit software, developed by Progress Software and used by WPS to transfer files in the provision of services to CMS, led to unauthorized access of personal information. Between May 27 and May 31, 2023, personally identifiable information (PII) of Medicare beneficiaries—collected for managing Medicare claims and CMS audits of healthcare providers—was compromised, affecting up to 946,801 individuals. WPS discovered and reported the breach to CMS, initiating notifications to the impacted parties.
Type: Data Breach
Attack Vector: Software Vulnerability
Vulnerability Exploited: MOVEit software vulnerability
Incident : Data Breach
Title: Medicare Beneficiary PII Breach via MOVEit Software
Description: WPS, working with CMS, has begun notifying nearly a million individuals affected by a breach concerning their protected health information. This was due to a security flaw in MOVEit software developed by Progress Software, leading to unauthorized access of Medicare beneficiary PII during file transfers for Medicare claim management and CMS healthcare provider audits. The breach occurred from May 27 to 31, 2023, with WPS informing CMS on July 8. 946,801 Medicare recipients are receiving notifications of this compromise of their personal data.
Date Detected: 2023-07-08
Type: Data Breach
Attack Vector: Unauthorized Access
Vulnerability Exploited: Security flaw in MOVEit software
Incident : Data Breach
Title: WPS Medicare Administrative Services Security Breach
Description: WPS, in connection with its Medicare administrative services, reported a security breach due to a vulnerability in the MOVEit software provided by Progress Software. This incident potentially compromised the protected health information (PHI) of 946,801 Medicare beneficiaries, including data essential for managing Medicare claims and supporting CMS audits. Unauthorized access occurred between May 27 and May 31, 2023, was discovered later, and notifications to affected individuals commenced following the breach acknowledgment.
Type: Data Breach
Attack Vector: Software Vulnerability
Vulnerability Exploited: MOVEit software vulnerability
Incident : Security Breach
Title: MOVEit Software Breach
Description: A security breach occurred involving the MOVEit software used by WPS for handling Medicare administrative services, resulting in unauthorized access to personal information.
Date Detected: 2023-05-27
Date Publicly Disclosed: 2023-07-08
Type: Security Breach
Incident : Data Breach
Title: CMS Medicare Beneficiaries Data Breach
Description: Unauthorized third parties gained access to the personal information (PII) of 946,801 Medicare beneficiaries due to a security vulnerability in the MOVEit software.
Date Detected: 2023-07-08
Type: Data Breach
Attack Vector: Software Vulnerability
Vulnerability Exploited: MOVEit software vulnerability
Threat Actor: Unauthorized third parties
Incident : Data Breach
Title: Data Breach at WPS Affecting Medicare Beneficiaries
Description: WPS, in conjunction with the CMS, is notifying individuals of a data breach due to a vulnerability in the MOVEit software developed by Progress Software. This breach occurred between May 27 and May 31, 2023, and compromised the PII of Medicare beneficiaries. The exposed data was collected for managing Medicare claims and supporting CMS audits of healthcare providers. This affected PII includes individuals who are not Medicare beneficiaries but have received healthcare services. A total of 946,801 people were notified of the potential leak of their personal information.
Date Detected: 2023-05-27
Type: Data Breach
Attack Vector: Software Vulnerability
Vulnerability Exploited: MOVEit software vulnerability
Incident : Data Breach
Title: WPS Data Breach
Description: WPS, a contractor for the Centers for Medicare & Medicaid Services (CMS), experienced a data breach due to a vulnerability in the MOVEit software used for transferring files. This incident, occurring between May 27 and May 31, 2023, potentially compromised the personally identifiable information (PII) of Medicare beneficiaries, related to Medicare claims management, and PII supporting CMS audits of healthcare providers. Approximately 946,801 individuals are affected and notifications are being sent to those whose information was at risk. The breach was disclosed to CMS on July 8, following the discovery of the unauthorized access to personal data.
Date Detected: 2023-07-08
Date Publicly Disclosed: 2023-07-08
Type: Data Breach
Attack Vector: Vulnerability Exploitation
Vulnerability Exploited: MOVEit software vulnerability
Incident : Data Breach
Title: CMS and WPS Security Breach
Description: A security breach affecting the personal information of Medicare beneficiaries due to a vulnerability in the MOVEit software by Progress Software.
Date Detected: 2023-05-27
Type: Data Breach
Attack Vector: Software Vulnerability
Vulnerability Exploited: MOVEit Software Vulnerability
What are the most common types of attacks the company has faced?
Common Attack Types: The most common types of attacks the company has faced is Vulnerability.
How does the company identify the attack vectors used in incidents?
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Security flaw in MOVEit software.
Impact of the Incidents
What was the impact of each incident?
Incident : Data Breach WPS001041225
Data Compromised: Personally Identifiable Information (PII)
Incident : Data Breach WPS001040725
Data Compromised: Protected Health Information (PHI), Medicare claims data, CMS audit data
Systems Affected: MOVEit software
Incident : Security Breach WPS001040625
Data Compromised: PHI, PII
Incident : Data Breach WPS001040125
Data Compromised: PII of Medicare beneficiaries
Incident : Data Breach WPS001032825
Data Compromised: PII
Incident : Data Breach WPS001103024
Data Compromised: PII of Medicare beneficiaries
Incident : Data Breach WPS000091024
Data Compromised: Personal Information of Medicare Beneficiaries
Systems Affected: Medicare Claim Management and CMS Audits
What types of data are most commonly compromised in incidents?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are PII, PII, Protected Health Information (PHI), Medicare claims data, CMS audit data, PHI, PII, PII, PII, PII and Personal Information.
Which entities were affected by each incident?
Incident : Data Breach WPS001041225
Entity Type: Company
Industry: Healthcare
Customers Affected: 946,801
Incident : Data Breach WPS001041025
Entity Type: Healthcare
Industry: Healthcare
Customers Affected: 946801
Incident : Data Breach WPS001040725
Entity Type: Organization
Industry: Healthcare
Customers Affected: 946801
Incident : Security Breach WPS001040625
Entity Type: Organization
Industry: Healthcare
Customers Affected: 946801
Incident : Data Breach WPS001040125
Entity Type: Government Agency
Industry: Healthcare
Location: United States
Customers Affected: 946,801 Medicare beneficiaries
Incident : Data Breach WPS001032825
Entity Type: Company
Industry: Healthcare
Customers Affected: 946,801
Incident : Data Breach WPS001103024
Entity Type: Contractor
Industry: Healthcare
Customers Affected: 946,801
Incident : Data Breach WPS000091024
Entity Type: Government Agency
Industry: Healthcare
Customers Affected: 946801
Response to the Incidents
What measures were taken in response to each incident?
Incident : Data Breach WPS001041225
Communication Strategy: Notifications to impacted parties
Incident : Data Breach WPS001041025
Communication Strategy: Notifying affected individuals
Incident : Data Breach WPS001040725
Communication Strategy: Notifications to affected individuals
Incident : Data Breach WPS001040125
Communication Strategy: Notifying affected individuals
Incident : Data Breach WPS001103024
Communication Strategy: Notifications sent to affected individuals
Data Breach Information
What type of data was compromised in each breach?
Incident : Data Breach WPS001041225
Type of Data Compromised: PII
Number of Records Exposed: 946,801
Personally Identifiable Information: True
Incident : Data Breach WPS001041025
Type of Data Compromised: PII
Number of Records Exposed: 946801
Sensitivity of Data: High
Personally Identifiable Information: Yes
Incident : Data Breach WPS001040725
Type of Data Compromised: Protected Health Information (PHI), Medicare claims data, CMS audit data
Number of Records Exposed: 946801
Sensitivity of Data: High
Incident : Security Breach WPS001040625
Type of Data Compromised: PHI, PII
Number of Records Exposed: 946801
Sensitivity of Data: High
Personally Identifiable Information: Yes
Incident : Data Breach WPS001040125
Type of Data Compromised: PII
Number of Records Exposed: 946,801
Sensitivity of Data: High
Personally Identifiable Information: Yes
Incident : Data Breach WPS001103024
Type of Data Compromised: PII
Number of Records Exposed: 946,801
Sensitivity of Data: High
Personally Identifiable Information: Medicare claims management, PII supporting CMS audits of healthcare providers
Incident : Data Breach WPS000091024
Type of Data Compromised: Personal Information
Number of Records Exposed: 946801
Sensitivity of Data: High
Personally Identifiable Information: Yes
Regulatory Compliance
Were there any regulatory violations and fines imposed for each incident?
Incident : Data Breach WPS001041225
Regulatory Notifications: Reported to CMS
References
Where can I find more information about each incident?
Incident : Data Breach WPS001040125
Source: CMS Notification
Where can stakeholders find additional resources on cybersecurity best practices?
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: CMS Notification.
Investigation Status
How does the company communicate the status of incident investigations to stakeholders?
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through were Notifications to impacted parties, Notifying affected individuals, Notifications to affected individuals, Notifying affected individuals and Notifications sent to affected individuals.
Stakeholder and Customer Advisories
Were there any advisories issued to stakeholders or customers for each incident?
Incident : Data Breach WPS001103024
Customer Advisories: Notifications sent to affected individuals
What advisories does the company provide to stakeholders and customers following an incident?
Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: was Notifications sent to affected individuals.
Initial Access Broker
How did the initial access broker gain entry for each incident?
Incident : Data Breach WPS001041025
Entry Point: Security flaw in MOVEit software
Post-Incident Analysis
What were the root causes and corrective actions taken for each incident?
Incident : Data Breach WPS001041025
Root Causes: Security flaw in MOVEit software
Additional Questions
General Information
Who was the attacking group in the last incident?
Last Attacking Group: The attacking group in the last incident was an Unauthorized third parties.
Incident Details
What was the most recent incident detected?
Most Recent Incident Detected: The most recent incident detected was on 2023-07-08.
What was the most recent incident publicly disclosed?
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2023-07-08.
Impact of the Incidents
What was the most significant data compromised in an incident?
Most Significant Data Compromised: The most significant data compromised in an incident were Personally Identifiable Information (PII), PII, Protected Health Information (PHI), Medicare claims data, CMS audit data, PHI, PII, PII of Medicare beneficiaries, PII, PII of Medicare beneficiaries and Personal Information of Medicare Beneficiaries.
What was the most significant system affected in an incident?
Most Significant System Affected: The most significant system affected in an incident was MOVEit software and MOVEit software and Medicare Claim Management and CMS Audits.
Data Breach Information
What was the most sensitive data compromised in a breach?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Personally Identifiable Information (PII), PII, Protected Health Information (PHI), Medicare claims data, CMS audit data, PHI, PII, PII of Medicare beneficiaries, PII, PII of Medicare beneficiaries and Personal Information of Medicare Beneficiaries.
What was the number of records exposed in the most significant breach?
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 3.8M.
References
What is the most recent source of information about an incident?
Most Recent Source: The most recent source of information about an incident is CMS Notification.
Stakeholder and Customer Advisories
What was the most recent customer advisory issued?
Most Recent Customer Advisory: The most recent customer advisory issued was was an Notifications sent to affected individuals.
Initial Access Broker
What was the most recent entry point used by an initial access broker?
Most Recent Entry Point: The most recent entry point used by an initial access broker was an Security flaw in MOVEit software.
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
