AccidentalHealthcareFinancial ServicesHealthcareMisdeliveryCustomer Data InvolvedGovernment IDIdentity (basic)MediumResolved

Family Medical Care Plan

bd_b1ed374785ed60fb · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 22, 2013

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Family Medical Care Plan →

NECA/IBEW Family Medical Care Plan inadvertently included Social Security numbers on envelopes containing generic Summary of Benefits Coverage documents sent to members near the end of 2012. The SSNs were printed without dashes. The organization implemented additional internal controls and offered one year of complimentary identity theft protection via LifeLock to affected members.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 28, 2012

Begins

Jan 22, 2013

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_eb6e009c7e6caed42013-01-24 · +2dVerified

Name: Family Medical Care Plan
norm: family medical care plan
Domain: nifmcp.com

Name: Family Medical Care Plan
norm: family medical care plan
Domain: nifmcp.com
Industry: HealthcarellmFinancial Servicesllm

Discovered: —
Breach occurred: Dec 28, 2012
Materiality determined: —
Notification sent: Jan 7, 2013
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unknown

During the incident: Reviewing all of our systems and vendor relationships
Implementing additional internal controls and safeguards
Offering one year of complimentary identity theft protection with LifeLock
Changes made: Reviewing all of our systems and vendor relationships
Implementing additional internal controls and safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGJan 22 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-38699
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 22, 2013
Raw hash: 0d6f9f003df0cac0f1ec7ba2f91dba27d92388e390cb5e4d6f3e86932e608a38

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFamily Medical Care Plan

Victim entityFamily Medical Care Plan

IncidentUnknown

Stated responseReviewing all of our systems and vendor relationships

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov