Sweetser

Sweetser reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-10-28. 52 Massachusetts residents were affected. The report records the breach type as electronic.

Sweetser, a nonprofit mental health provider, notified the NH Attorney General that unauthorized access to an employee's email account on June 24, 2019, potentially exposed personal and health information of 327 New Hampshire residents. The incident involved valid credential compromise leading to email collection. Sweetser engaged forensic investigators, notified the FBI and OCR, and offered credit monitoring.

Sweetser notified Montana residents of a data security incident discovered on June 24, 2019, involving unauthorized access to an employee's email account via phishing. The incident exposed personal information including names, SSNs, driver's license numbers, and health/insurance data. Sweetser engaged forensic investigators, reported the matter to the FBI, and offered complimentary credit monitoring through Experian.

Sweetser, a healthcare provider in Maine, reported to HHS on 2019-09-13 a Hacking/IT Incident (email phishing attack) affecting 22,000 individuals. Several employees were victims of a phishing attack exposing ePHI including names, addresses, dates of birth, driver's license numbers, SSNs, claims data, medical conditions, and health insurance information. Breached information located in Email.

SWEETSER filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-430). The register records the breach as discovered on June 24, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.