Confidio, LLC

Confidio, LLC notified the NH AG of an email account compromise affecting 2 NH residents. Unauthorized access occurred Nov 29-Dec 12, 2019. Data included names, SSNs, DOBs, and PHI. Confidio secured the account, engaged forensic assistance, and offered 1 year of credit monitoring.

Confidio, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-03-31. 2 Massachusetts residents were affected. The report records the breach type as electronic.

Confidio, LLC, a Maryland-based business associate, reported to HHS on 2020-03-31 a Hacking/IT Incident (email phishing) affecting 14,016 individuals. Several employees were victims of an email phishing scheme exposing ePHI including names, dates of birth, addresses, Social Security numbers, clinical information, and other treatment information. The BA notified HHS, affected individuals, and the media, and provided credit monitoring. Mitigation included new administrative and technical safeguards and workforce retraining. Breached information was located on Email.

CONFIDIO, LLC filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-159). Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.