Updated news reports are substantiating that a data breach on May 31, 2017 suffered by OneLogin, a Single Sign-On (SSO) and identity management firm, might have significant impacts.   A malefactor gained access to all of the OneLogin's encrypted customer Login ID's, passwords and data for 7 hours. OneLogin cannot rule out the possibility that the unknown party had the ability to decrypt all of their customer's Login ID's, passwords and data. This is the second data breach reported by OneLogin within the past year.

  

https://arstechnica.com/security/2017/06/onelogin-data-breach-compromised-decrypted/

  

http://fortune.com/2017/06/02/onelogin-password-security-breach/

  

While Mercy Care Plan, Mercy Maricopa Integrated Care and Mercy Care Advantage do not use OneLogin, we wanted to make sure you are aware of this as soon as possible.  Please confirm that you are taking the appropriate steps to safeguard our data if you use OneLogin.