90 Degree Benefits, Inc.
ent_e6c7a07abea942b1f9ef6a4c
Disclosures
10
State AG · HHS OCR · 8 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
185,459
nationwide · HHS OCR WI
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- 90 Degree Benefits, Inc.
- Normalized
- 90 degree benefits— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (10)newest first
- New Hampshire State AGas victim2023-04-13
90 Degree Benefits, Inc. notified the NH AG of unauthorized access to systems between Dec 5-11, 2022, discovered Dec 10, 2022. 49 NH residents affected. Investigation ongoing with forensic firm and FBI cooperation. Credit monitoring offered.
- South Carolina State AGas victim2023-04-10
90 Degree Benefits-Wisconsin experienced unauthorized access to systems containing PII, PHI, and financial data between Dec 5-11, 2022. Suspicious activity was detected on Dec 10, 2022. FBI was notified. Investigation ongoing. Identity monitoring offered.
- WISCONSINHHS OCRas victim2023-02-08
90 Degree Benefits, Inc. (a Business Associate based in WI) reported to HHS OCR on 2023-02-08 a Hacking/IT Incident affecting 185,459 individuals. Breached information was located on a Network Server. PHI involved included names, addresses, dates of birth, driver's license numbers, Social Security numbers, claims information, diagnoses/conditions, lab results, medications, and other treatment and identifier information. The CE notified HHS, affected individuals, the media, and provided substitute notice. Technical safeguards were strengthened and OCR provided technical assistance.
- Montana State AGas victim2022-07-18
90 Degree Benefits Wisconsin experienced unauthorized access to systems containing personal information on February 27, 2022. The company engaged forensic investigators, notified the FBI, and implemented enhanced security measures. Affected individuals were offered complimentary identity monitoring services through IDX. The specific data types accessed were not confirmed, but personal information was potentially involved.
- Maine State AGas victim2022-06-10
90 Degree Benefits, Inc. reported an external system breach (hacking) occurring on 02/24/2022, discovered on 04/21/2022. The incident affected 163,483 individuals nationwide, including 92 Maine residents. Acquired data included names and Social Security Numbers. The entity, represented by attorney Todd Rowe of Lewis Brisbois, provided 12 months of credit and CyberScan monitoring and identity theft recovery services through IDX.
- Oregon State AGas victim2022-06-10
90 Degree Benefits, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2022-06-10. The breach occurred during 1/28/2022 - 2/28/2022. The breach was discovered on 4/21/2022. 163,483 individuals were affected. Notice was sent on 6/9/2022.
- Massachusetts State AGas victim2022-06-10
90 Degree Benefits, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-06-10. 750 Massachusetts residents were affected. The report records the breach type as electronic.
- Indiana State AGas victim2022-06-09
90 Degree Benefits, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2022-01-28 and was reported on 2022-06-09. 7,203 Indiana residents were affected. 163,483 individuals affected in total.
- South Carolina State AGas victim2022-06-09
90 Degree Benefits Wisconsin (formerly EBSO, Inc.) notified individuals of a data security incident on February 27, 2022, involving unauthorized access to systems containing personal information. The company engaged forensic investigators, notified the FBI, and offered complimentary identity monitoring services via IDX to affected individuals.
- WISCONSINHHS OCRas victim2022-06-09
90 Degree Benefits, Inc. reported to HHS on 2022-06-09 a Hacking/IT Incident affecting 172,450 individuals. Breached information located on Network Server. The business associate reported a hacking incident affecting PHI including names, addresses, DOB, SSN, diagnoses, lab results, and medications. The BA notified HHS, individuals, and media, and implemented additional technical safeguards.