TRUEbenefits LLC

TRUEbenefits LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2017-09-18. 20,476 individuals were affected.

TRUEbenefits LLC, an insurance brokerage, reported a security incident on May 19, 2017, involving unauthorized access to an employee's email account via a phishing scheme. The breach exposed names, Social Security numbers, and health plan details (diagnoses, claims, invoices) of clients and their dependents. TRUEbenefits secured the account, engaged forensic investigators, and offered two years of Experian IdentityWorks monitoring to affected individuals.

TRUEbenefits LLC reported to HHS on 2017-08-14 a Hacking/IT Incident affecting 17309 individuals. An unauthorized person accessed an employee’s email account through a phishing incident, compromising emails containing electronic protected health information (ePHI). The breach involved demographic, financial, and clinical information. The breached information was located on Email.

TRUEbenefits LLC, a business sector entity reported a phishing incident to the Washington Attorney General. The organization became aware of the incident on 2017-06-26 and filed notice on 2017-08-14. 12,327 Washington residents were affected. 49 days elapsed between awareness and notification.