1. Press Release
  2. Pennie Outlines Consumer Data Protections as Open Enrollment Starts

Pennie Outlines Consumer Data Protections as Open Enrollment Starts

Nov 6, 2026

Pennie’s Open Enrollment Period began on November 1 for 2027 health coverage. Open Enrollment is the annual opportunity for Pennsylvanians who need health coverage to shop and enroll in a health plan at pennie.com.

As hundreds of thousands of Pennsylvanians seek health coverage with federal premium tax credits to lower costs, it is important to know that Pennie takes seriously our responsibility to protect the information provided by individuals to apply and enroll in coverage.

Pennie has notified current and former enrollees that their data may have been involved in a security incident that affected a contractor used by Pennie to conduct independent financial audits, which Pennie is required to complete. Impacted individuals were notified by email on Friday, November 6th, with the contact information of the contractor, Zelenkofske Axelrod (“ZA”), for any follow up questions.

The data incident did not involve any of Pennie’s systems or websites. The incident only impacted the contractor that conducts mandated financial audits and only impacted certain information that was requested by the contractor for the purpose of the audit. The information ZA had from Pennie about enrollees was limited to: name, date of birth, zip code and health plan information. No other Pennie enrollee data was affected. The impacted data from Pennie did NOT include Social Security Number, contact information, income information, password, login information, financial or credit card information.

Pennie has a comprehensive and robust approach to data privacy and security to make sure your data stays safe. Pennie follows the strictest data protections required under federal and state law, and adopts a wide range of industry best practices. Pennie’s comprehensive privacy and security measures have been integrated into every part of our website, back-end system, operations, customer support, and required reporting.

Pennie’s Privacy Policy outlines all the ways that we keep your data secure and who we are required to share some information with on a “need to know” basis. See Pennie’s Privacy Policy at: https://agency.pennie.com/policies/.

 

Contact Information:

Kelsey Cameron

Pennie Marketing Communications Manager

kecameron@pa.gov

Share this event