HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedIDENTITY_BASICHEALTH_BASICLowContained
Health Net Life Insurance Company
bd_14570427ddb12256 · schema v1 · pii pii-v1
Full breach record for Health Net Life Insurance Company →Health Net Life Insurance Company reported a data breach involving its third-party vendor, Accellion. Between January 7 and January 25, 2021, an unknown malicious party accessed files containing personal information, including names, addresses, dates of birth, insurance IDs, and health information. Health Net activated its incident response plan, stopped using Accellion, and provided one year of free identity protection services to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_15ab921d5f6b32e0HHS OCRfiled 2021-03-25Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-539505
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2021
- Raw hash
- 28f7315749a8ee36a7d7d2ed1abb92a97659883aa27976861e88af4036c1b14d
Reporting entity
- Name
- Health Net Life Insurance Companynorm: health net life insurance
Victim entity
- Name
- Health Net Life Insurance Companynorm: health net life insurance
Incident
- Discovered
- Jan 25, 2021
- Materiality determined
- Mar 24, 2021
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.