TRUEbenefits LLC
bd_15431eb24bf8881d · schema v1 · pii pii-v1
Full breach record for TRUEbenefits LLC →TRUEbenefits LLC experienced a phishing incident where an employee's compromised email account was used to send phishing emails on May 19, 2017. The unauthorized access occurred between May 18 and May 19, 2017. Affected data may include names, Social Security numbers, and protected health information (PHI) such as diagnoses and treatment details. The company secured the account, engaged forensic investigators, and offered two years of identity monitoring to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
May 18, 2017
Begins
May 19, 2017
Discovered
Sep 18, 2017
Filed
vs. sector median
+9 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Oregon State AGbd_01042eb2a1c1134f2017-09-18Verified
- New Hampshire State AGbd_b716761190d6c3c82017-09-18Verified
- HHS OCRbd_713de8a4c173160b2017-08-14 · +35dVerified
- Washington State AGbd_be9433ca128d9c052017-08-14 · +35dCandidate
Show 1 more filing ↓Show fewer ↑up to 35d gap
- Massachusetts State AGbd_d60c0a62678ac3ba2017-08-14 · +35dVerified
Filing propagation · 6 filings · 5 states
View merged incident ↗Pattern: first filing Aug 14 (WA), last Sep 18 (CA) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.