HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICAUTHENTICATIONHEALTH_BASICLowContained
Castlight Health, Inc.
bd_f248763d5d9a0995 · schema v1 · pii pii-v1
Full breach record for Castlight Health, Inc. →An unauthorized actor utilized credentials sourced from other data breaches to gain access to a user's account on the Castlight application. This breach resulted in the potential compromise of the user's first and last name, account password, and both personal health and health insurance information.
Maine clockDiscovered Jun 22, 2020 → Filed with AG Oct 30, 2020130d ✗ ME AG >90d19 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6dc3b111-50b8-4d3b-9834-7b9cdde8f9d0.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 30, 2020
- Raw hash
- 4a62880e33fff8d8cc5fd50f354f091564e0ed55f46810bcdd3952e16fbd8bcb
Reporting entity
- Name
- Castlight Health, Inc.norm: castlight health
Victim entity
- Name
- Castlight Health, Inc.norm: castlight health
Incident
- Discovered
- Jun 22, 2020
- Materiality determined
- —
- Notification sent
- Jul 22, 2020
- Affected individuals
- 1
- Data types
- IDENTITY_BASICAUTHENTICATIONHEALTH_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 19 weeks(130 days from discovery to filing)
- Compliance flags
- ME AG >90d · 130d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 22, 2020→ Filed with AG: Oct 30, 2020130d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.