WORLDWIDE INSURANCE SERVICES, LLC

Worldwide Insurance Services, LLC (doing business as GeoBlue) notified the California Attorney General of a data breach involving unauthorized access to employee email accounts. An attacker obtained credentials via a phishing scheme, potentially accessing emails containing international health plan information between October 11 and October 13, 2017. The company engaged forensic investigators, implemented MFA, and offered identity monitoring to affected individuals.

Worldwide Insurance Services, LLC (PA) reported to HHS OCR on 2018-04-30 a Hacking/IT Incident affecting 1,692 individuals. An unauthorized user gained access to employee email accounts via a phishing attack. PHI exposed included patients' names, dates of birth, Social Security numbers, claims information, clinical information, and financial information. Breached information was located in Email. In response, the entity upgraded email encryption, implemented MFA, and trained employees on phishing threats. OCR provided technical assistance on timely breach notifications.

Worldwide Insurance Services LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-04-30. 4 Massachusetts residents were affected. The report records the breach type as electronic.

Worldwide Insurance Services, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-03-22. 22 Massachusetts residents were affected. The report records the breach type as electronic.