You may have received a letter sharing an important update regarding a cybersecurity incident involving MedImpact Healthcare Systems, Inc. (MedImpact), the pharmacy benefits manager that provides services to JHMB health plans. This notice pertains to those on JHMB PPO Plan A and Plan B, as well as those who were previously on those plans.
On October 18, 2025, MedImpact identified unauthorized activity within certain systems in its environment. MedImpact took steps to secure the affected systems and engaged cybersecurity experts to investigate the incident and determine what information may have been impacted.
Following its investigation and review of the potentially impacted data, MedImpact recently notified JHMB that information belonging to certain JHMB health plan members was included in the affected data.
Why Are Members Being Notified Now?
We understand members may have questions about why they are receiving information about an incident that occurred in October 2025.
According to MedImpact, its investigation included a detailed review of the data potentially impacted by the incident to identify affected clients and individuals. MedImpact notified impacted clients, including JHMB, in August 2026 following that review.
What Information May Have Been Involved?
To be clear, this was not a breach of Fresno Unified data. This breach occurred on MedImpact’s side, and all notifications come directly through them.
The information potentially impacted varies by individual. It may include personal information and certain health-related information.
For a small number of JHMB members, Social Security numbers were also potentially impacted.
MedImpact has stated that it currently has no reason to believe that members’ information has been or will be misused.
What Should You Do?
MedImpact will send notification letters to members whose information was potentially impacted. The letter will explain what information may have been involved and what steps you can take.
Some impacted members will also receive an offer for identity monitoring services from Kroll at no cost. Depending on eligibility, these services may include:
- Credit or minor identity monitoring
- Fraud consultation
- Identity theft restoration
If your MedImpact letter includes an offer for these services, JHMB strongly encourages you to review the letter carefully and consider enrolling before the activation deadline listed in your notice. Your individual letter will contain the activation code, verification information, and instructions you need to enroll.
Even if your notice does not include identity monitoring services, MedImpact provides additional resources and recommended precautions for protecting your information.
Additional Steps You Can Take
The information involved could potentially be used fraudulently to gain your confidence in a fraud or scam.
As a routine precaution, members can remain vigilant by monitoring financial accounts and credit reports for unfamiliar or unauthorized activity.
MedImpact’s notification also provides information about additional protections that may be available to you, including:
- Obtaining free credit reports
- Placing a fraud alert on your credit report
- Placing a security freeze on your credit report
- Reporting suspected identity theft or misuse of your personal information
Please follow the instructions and resources included in your individual MedImpact notice, as the information and services available may differ depending on the information potentially impacted.
Have Questions?
For questions about the MedImpact cybersecurity incident or your notification letter, contact Kroll, a vendor retained by MedImpact to assist you:
(844) 958-8925
Monday–Friday
8 a.m.–5:30 p.m. Central Time
If you receive a notice, please have your membership number available when calling.
JHMB understands that receiving a notice about the potential exposure of personal information can be concerning. We encourage members to carefully review any communication they receive from MedImpact and take advantage of the protection resources offered to them, when applicable.
JHMB will continue to share important information with members as additional updates become available.
