TANDEM DIABETES CARE, INC.
ent_019e2069e549be77a21e99a09856368e
Disclosures
6
State AG · HHS OCR · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
140,838
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- TANDEM DIABETES CARE, INC.
- Normalized
- tandem diabetes care— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300JEPFOD0K4D3I05
- SEC EDGAR CIK
- 0001438133
- Domain
- None on record
Disclosure history (6)newest first
- Massachusetts State AGas victim2020-03-17
Tandem Diabetes Care, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-03-17. 99 Massachusetts residents were affected. The report records the breach type as electronic.
- CALIFORNIAHHS OCRas victim2020-03-17
Tandem Diabetes Care, Inc. reported to HHS on 2020-03-17 a Hacking/IT Incident affecting 140,781 individuals. Breached information located on Email. The cyber-attack involved electronic protected health information (ePHI) including names, dates of birth, addresses, Social Security numbers, diagnoses, medications, and treatment information. The entity provided substitute notice on its website and complimentary identity and credit monitoring services. The CE revised HIPAA security procedures and implemented additional technical safeguards.
- Oregon State AGas victim2020-03-17
Tandem Diabetes Care, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2020-03-17. The breach occurred during 1/17/2020 - 1/20/2020. The breach was discovered on 1/17/2020. 140,838 individuals were affected. Notice was sent on 3/17/2020.
- Montana State AGas victim2020-03-17
Tandem Diabetes Care notified affected individuals of a phishing incident on Jan 17, 2020, where unauthorized access to employee email accounts exposed names, SSNs, and clinical diabetes data. The company secured accounts, engaged forensic investigators, and offered credit monitoring.
- California State AGas victim2020-03-17
Tandem Diabetes Care experienced a phishing incident where an unauthorized person gained access to employee email accounts between January 17 and January 20, 2020. The breach potentially exposed personal information including names, contact details, Social Security numbers, product usage data, and clinical diabetes therapy data. The company secured the accounts, engaged a cybersecurity firm, and offered one year of identity protection services to affected individuals.
- Illinois State AGas victim2020-01-01
TANDEM DIABETES CAR INC filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-137). The register records the breach as discovered on January 17, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.