Brightline Apartments LLC

Brightline, Inc. notified the California AG of a data breach involving a third-party vendor, Fortra (GoAnywhere MFT). An unauthorized party exploited a previously unknown vulnerability in Fortra's SaaS to access and download files containing personal information of Stanford group health plan members. Affected data includes names, addresses, DOBs, phone numbers, member IDs, employer names, and coverage dates. Brightline deactivated credentials, rebuilt infrastructure, and removed data from the affected service. Identity theft protection services were offered.