Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPIIMediumContained
TANDEM DIABETES CARE, INC.
bd_967313c2bc1de98b · schema v1 · pii pii-v1
Full breach record for TANDEM DIABETES CARE, INC. →Tandem Diabetes Care experienced a phishing incident where an unauthorized person gained access to employee email accounts between January 17 and January 20, 2020. The breach potentially exposed personal information including names, contact details, Social Security numbers, product usage data, and clinical diabetes therapy data. The company secured the accounts, engaged a cybersecurity firm, and offered one year of identity protection services to affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_115a67d17b94defaHHS OCRfiled 2020-03-17Verified
- bd_4a5f61e0d367ccc7Oregon State AGfiled 2020-03-17Verified
- bd_6c63dab2a1b5df4dMontana State AGfiled 2020-03-17Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-188367
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 17, 2020
- Raw hash
- b5afd2189c619a9d536926b3de7349b79951520826912f9aa349b7c086662b01
Reporting entity
- Name
- TANDEM DIABETES CARE, INC.norm: tandem diabetes care
Victim entity
- Name
- TANDEM DIABETES CARE, INC.norm: tandem diabetes care
Incident
- Discovered
- Jan 17, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPII
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.