Bay Bridge Administrators
ent_8cd68bca74facae4262451b6
Disclosures
8
HHS OCR · State AG · Leak Site · 8 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
251,689
as filed · State AG OR
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- Bay Bridge Administrators
- Normalized
- bay bridge administrators— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- bbadmin.com
Disclosure history (8)newest first
- TEXASHHS OCRas victim2022-12-30
Bay Bridge Administrators, LLC reported to HHS on 2022-12-30 a Hacking/IT Incident affecting 187,742 individuals. Breached information located on Network Server. The incident involved a ransomware attack encrypting PHI (names, addresses, DOB, driver's license info). The business associate implemented new safeguards and retrained staff.
- ⛰️New Hampshire State AGas victim2022-12-29
Bay Bridge Administrators, LLC (BBA), a third-party administrator of insurance products, notified the New Hampshire Attorney General of a ransomware incident. An unknown actor accessed the BBA network prior to August 25, 2022, and exfiltrated data on or about September 3, 2022. The incident involved personal information including names, SSNs, driver's licenses, DOB, and medical/health insurance data. BBA engaged a cybersecurity firm, reported to DHS, and offered 24 months of credit monitoring to 159 affected New Hampshire residents.
- 🦬Montana State AGas victim2022-12-29
Bay Bridge Administrators, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2022-12-29. The breach occurred from 8/25/2022 to 9/3/2022. 152 Montana residents were affected.
- 🌲Washington State AGas victim2022-12-29
Bay Bridge Administrators, LLC, a business sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2022-09-05 and filed notice on 2022-12-29. 6,980 Washington residents were affected. 115 days elapsed between awareness and notification. 2 days to identify the breach. 0 days to contain the breach.
- 🐻California State AGas victim2022-12-29
Bay Bridge Administrators, LLC notified the California AG of a data breach where an unknown actor gained access to its network prior to August 25, 2022, and exfiltrated data on September 3, 2022. The incident was discovered on September 5, 2022. Affected data includes names, SSNs, driver's licenses, dates of birth, and medical/health insurance information. The company engaged a cybersecurity firm, secured the network, notified law enforcement, and offered 24 months of credit monitoring.
- 🦫Oregon State AGas victim2022-12-29
Bay Bridge Administrators, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2022-12-29. The breach occurred during 9/3/2022 - 9/5/2022. The breach was discovered on 9/5/2022. 251,689 individuals were affected. Notice was sent on 12/29/2022.
- 🦞Maine State AGas victim2022-12-29
On September 3, 2022, Bay Bridge Administrators, LLC experienced an external system breach, which was discovered on September 5, 2022. The breach affected 72 Maine residents, compromising their names and driver's license or non-driver identification card numbers. The company notified affected individuals on December 29, 2022, and offered identity theft protection services through IDX.
- GLOBALLeak Siteas victim2022-09-22