The Affiliated Group

The Affiliated Group (TAG) notified the NH AG of a phishing incident resulting in unauthorized access to an employee email account. The actor sent phishing emails to harvest credentials. The account contained PHI and PII (SSN, medical record numbers, financial account info) of approximately 31 NH residents. TAG disabled the account, engaged forensic investigators, and provided 12 months of credit monitoring.

The Affiliated Group (TAG) confirmed on March 28, 2018, that an unauthorized actor gained access to one employee email account following a phishing incident in November 2017. The attacker used the account to send phishing emails. A review determined that names, Social Security numbers, medical record numbers, limited treatment information, subscriber IDs, and some financial account information were potentially accessible. 1,289 California residents were notified starting September 19, 2018. TAG provided 12 months of identity theft protection.

The Affiliated Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-09-19. 79 Massachusetts residents were affected. The report records the breach type as electronic.

The Affiliated Group (TAG) disclosed a November 2017 phishing incident resulting in unauthorized access to an employee email account. Confirmed on March 28, 2018, the breach exposed PHI and PII including SSNs, driver's licenses, and financial account numbers. TAG engaged forensic investigators, reset credentials, and offered credit monitoring.