Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
SAG-AFTRA Health Plan
bd_0ca33c9d0a197ad5 · schema v1 · pii pii-v1
Full breach record for SAG-AFTRA Health Plan →SAG-AFTRA Health Plan notified consumers of a phishing incident compromising an employee's email account between Sept 17-18, 2024. The breach exposed names, SSNs, and health insurance information for participants and dependents. The Plan contained the incident, engaged forensic experts, notified law enforcement, and offered one year of Experian IdentityWorks.
Vermont clock✗ VT AG >45 bday25 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1b5088553ded9aacNew Hampshire State AGfiled 2025-03-14Verified
- bd_4a1f1caa590b3465California State AGfiled 2025-03-14Verified
- bd_76baac9c98e3afcdOregon State AGfiled 2025-03-14Candidate
- bd_dfd33c6fd0994f17Washington State AGfiled 2025-03-14Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-03-14-sag-aftra-health-plan-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 14, 2025
- Raw hash
- 537cf7e6f06544466cfa6dfa294112d5fc7c3ddda9cf11ec1977855aab77514a
Reporting entity
- Name
- SAG-AFTRA Health Plannorm: sag aftra health plan
Victim entity
- Name
- SAG-AFTRA Health Plannorm: sag aftra health plan
Incident
- Discovered
- Sep 18, 2024
- Materiality determined
- —
- Notification sent
- Mar 14, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Notified law enforcement
- Initial access
- phishing_link
Compliance
- Time to disclose
- 25 weeks(177 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.