WebTPA Employer Services, LLC
ent_f5f79bf1c7b3b0bc73c5753b
Disclosures
15
State AG · HHS OCR · 10 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
2,518,533
nationwide · HHS OCR TX
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- WebTPA Employer Services, LLC
- Normalized
- webtpa employer— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- webtpa.com
Disclosure history (15)newest first
- South Carolina State AGas victim2024-07-22
WebTPA Employer Services, LLC reported a data breach where unauthorized actors accessed personal information (names, SSNs, DOBs, driver's licenses) between April 18-23, 2023. Suspicious activity was detected on December 28, 2023. WebTPA engaged third-party cybersecurity experts, notified law enforcement, and offered two years of identity monitoring to affected individuals.
- New Hampshire State AGas victim2024-07-22
Supplemental notice from WebTPA Employer Services, LLC to the New Hampshire Attorney General regarding a previously reported data security incident. Approximately 5,778 NH residents were notified by mail. WebTPA is offering two years of complimentary identity monitoring and established a dedicated call center.
- California State AGas victim2024-07-19
WebTPA Employer Services, LLC detected suspicious activity on its network on December 28, 2023. An investigation revealed that an unauthorized actor may have accessed personal information between April 18 and April 23, 2023. The incident affected individuals whose data was held by WebTPA in its role providing administrative services to benefit plans and insurance companies. WebTPA engaged third-party cybersecurity experts, notified law enforcement, and is offering two years of identity monitoring services to affected individuals.
- Massachusetts State AGas victim2024-05-10
WebTPA Employer Services LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-05-10. 37,012 Massachusetts residents were affected.
- Montana State AGas victim2024-05-08
WebTPA Employer Services, LLC disclosed a data breach where unauthorized actors accessed personal information between April 18-23, 2023. The incident was detected on December 28, 2023. WebTPA engaged third-party cybersecurity experts, notified law enforcement, and offered two years of identity monitoring services to affected individuals.
- California State AGas victim2024-05-08
WebTPA Employer Services, LLC detected suspicious activity on its network on December 28, 2023. An investigation revealed an unauthorized actor may have accessed personal information between April 18 and April 23, 2023. The company notified federal law enforcement and engaged third-party cybersecurity experts. Affected individuals are offered two years of identity monitoring. Financial and health data were not impacted.
- TEXASHHS OCRas victim2024-05-08
WebTPA Employer Services, LLC reported to HHS on 2024-05-08 a Hacking/IT Incident affecting 2518533 individuals. Breached information located on Network Server. Business Associate present.
- Indiana State AGas victim2024-05-08
WebTPA Employer Services, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-06 and was reported on 2024-05-08. 20,085 Indiana residents were affected. 2,429,175 individuals affected in total.
- Washington State AGas victim2024-05-08
WebTPA Employer Services, LLC reports a supplemental data security incident in Washington. Unauthorized access occurred between March 6 and May 12, 2023. Approximately 41,600 Washington residents were notified. Response included identity monitoring and a call center.
- New Hampshire State AGas victim2024-05-08
WebTPA Employer Services, LLC reported a data security incident to the New Hampshire Attorney General on May 8, 2024. Unauthorized access occurred via a VPN connection starting March 6, 2023, with exfiltration between April 18-23, 2023. The breach affected at least 3,510 New Hampshire residents, exposing eligibility files containing personal information. WebTPA notified law enforcement, engaged third-party experts, and offered complimentary identity monitoring services to affected individuals.
- Illinois State AGas victim2024-05-01
WEBTPA EMPLOYER SERVICES, LLC filed a data-breach notice with the Illinois Attorney General in May 2024 (case 24-05-018). The register records the breach as discovered on March 6, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- California State AGas victim2024-04-23
WebTPA Employer Services, LLC detected suspicious activity on its network on December 28, 2023. An investigation determined that an unauthorized actor may have accessed personal information between April 18 and April 23, 2023. The incident affected individuals whose data was held by WebTPA in its role providing administrative services to benefit plans and insurance companies, including Transamerica Life Insurance Company. WebTPA engaged third-party cybersecurity experts, notified law enforcement, and is offering two years of identity monitoring services to affected individuals.
- Montana State AGas reporting2024-04-19
WebTPA Employer Services, LLC notified Transamerica Life Insurance Company and affected individuals of a data breach. Unauthorized access occurred April 18-23, 2023, detected December 28, 2023. Personal information including SSNs and names was compromised. WebTPA engaged forensic experts, notified law enforcement, and provided 2 years of Kroll credit monitoring.
- South Carolina State AGas reporting2024-04-11
WebTPA Employer Services, LLC reported a data breach impacting Transamerica Life Insurance Company. Unauthorized access occurred April 18-23, 2023, detected Dec 28, 2023. PII and government IDs were exposed. WebTPA engaged forensic experts, notified law enforcement, and offered 2 years of credit monitoring.
- Hawaii State AGas victim2024-04-01
WebTPA Employer Services, LLC reported unauthorized access to its network between April 18-23, 2023, detected on December 28, 2023. The incident impacted personal information including names, SSNs, and DOBs of individuals covered by benefit plans administered by WebTPA. WebTPA engaged third-party cybersecurity experts, notified federal law enforcement, and offered two years of complimentary identity monitoring services through Kroll.