The Affiliated Group

The Affiliated Group (TAG) reported a data breach affecting 1,289 California residents. On or about November 20, 2017, an employee's email account was compromised via phishing, allowing an unauthorized actor to send phishing emails and access the account. The investigation determined that names, Social Security numbers, medical record numbers, limited treatment information, subscriber IDs, and financial account numbers were potentially accessible. TAG disabled the account, reset passwords, engaged forensic investigators, and provided 12 months of credit monitoring through TransUnion.