CASTLIGHT HEALTH, INC.
ent_019e2300c0a0a3a3ad85e07423eca79e
Disclosures
4
State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
55
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- CASTLIGHT HEALTH, INC.
- Normalized
- castlight health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300K52FAO83JL0L06
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- Illinois State AGas victim2021-01-01
CASTLIGHT HEALTH, INC filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-026). The register records the breach as discovered on July 16, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2021-01-01
CASTLIGHT HEALTH, INC filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-025). The register records the breach as discovered on June 22, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Maine State AGas victim2020-10-30
An unauthorized actor utilized credentials sourced from other data breaches to gain access to a user's account on the Castlight application. This breach resulted in the potential compromise of the user's first and last name, account password, and both personal health and health insurance information.
- New Hampshire State AGas victim2019-06-17
Castlight Health notified the NH Attorney General of a credential stuffing incident discovered on April 25, 2019. An unknown actor used stolen credentials from other breaches to attempt access to ~71 user accounts. Compromised data included names, DOB, health info, and insurance details. Notifications sent to NH residents on June 10, 2019. Castlight froze accounts and enhanced monitoring.