INOGEN, INC.

Inogen, Inc. reported to HHS on 2018-04-17 a Hacking/IT Incident affecting 29,528 individuals. Breached information located on Email. An unauthorized individual gained access to an employee email account and set up forwarding of messages from Jan 2, 2018 to Mar 14, 2018. Compromised PHI included names, addresses, DOBs, Medicare IDs, and medical equipment info. Inogen strengthened security controls including disabling email forwarding, password resets, and implementing dual-factor authentication.

Inogen, Inc. notified the New Hampshire Attorney General of a data security incident discovered on March 14, 2018. Unauthorized access to an employee email account exposed customer PII, including names, addresses, DOBs, Medicare IDs, and insurance info. 100 NH residents were notified on April 13, 2018. Inogen engaged forensic investigators, reset passwords, implemented MFA, and offered 12 months of credit monitoring.

Inogen, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2018-04-13. The breach occurred during 12/9/2017 - 3/14/2018. The breach was discovered on 3/14/2018. 29,528 individuals were affected. Notice was sent on 4/13/2018.

Inogen, Inc. notified Montana residents of a data breach discovered on March 14, 2018, where an employee's email account was accessed without authorization. The incident may have exposed names, addresses, DOB, Medicare IDs, and insurance info. Inogen engaged forensic investigators, reset passwords, implemented MFA, and offered 12 months of credit monitoring.

Inogen, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-04-13. 415 Massachusetts residents were affected. The report records the breach type as electronic.

Inogen, Inc. reported unauthorized access to an employee email account containing customer personal and health information. The breach occurred on December 9, 2017, but was discovered on March 14, 2018. Approximately 3,251 California residents were affected. Data exposed included names, addresses, dates of birth, Medicare IDs, and insurance policy information. Inogen implemented MFA, reset passwords, and engaged forensic investigators.

Inogen, Inc. notified Washington AG of unauthorized access to an employee email account on March 14, 2018. The incident exposed customer PII including names, addresses, DOBs, Medicare IDs, and health data. 518 Washington residents were notified on April 13, 2018. Inogen engaged forensic investigators, reset passwords, implemented MFA, and offered 12 months of credit monitoring.