HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
90 Degree Benefits, Inc. - Wisconsin
bd_73b17896c1f74b73 · schema v1 · pii pii-v1
Full breach record for 90 Degree Benefits, Inc. - Wisconsin →90 Degree Benefits, Inc. reported a security event where an unauthorized actor accessed an employee's email account on October 18, 2024. The incident involved the exposure of names, Social Security numbers, and member identification numbers. The company secured the account, investigated the scope, and is offering credit monitoring. This is a supplemental notice.
California clockDiscovered Oct 18, 2024 → Notified Apr 18, 2025182d ✗ CA 60-day late26 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-601612
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 18, 2025
- Raw hash
- 11f5dc9943460a633e3508b5363195b29b9760ab65f14ccdabf87b47969de376
Reporting entity
- Name
- 90 Degree Benefits, Inc. - Wisconsinnorm: 90 degree benefits inc wisconsin
Victim entity
- Name
- 90 Degree Benefits, Inc. - Wisconsinnorm: 90 degree benefits inc wisconsin
Incident
- Discovered
- Oct 18, 2024
- Materiality determined
- —
- Notification sent
- Apr 18, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 26 weeks(182 days from discovery to filing)
- Compliance flags
- CA 60-day late · 182d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 18, 2024→ Notified: Apr 18, 2025182d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.