Brightline Apartments LLC

Brightline, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-04-07. The breach occurred on 1/30/2023. 403 Montana residents were affected.

Affected (this filing): 403

Brightline, Inc. filed a data breach notice with the Delaware Attorney General regarding an incident involving Forta, a third-party provider of GoAnywhere MFT SaaS. The source document provided was a PDF placeholder with no extractable text content, resulting in null values for counts, dates, and specific data types affected.

Brightline, Inc. reported to HHS on 2023-04-07 a Hacking/IT Incident affecting 31440 individuals. Breached information located on Network Server. The business associate's third-party provider was the victim of a cyber-attack affecting PHI including names, DOB, addresses, and member IDs. Brightline provided credit monitoring and implemented safeguards.

Affected (this filing): 31,440

Brightline, Inc. reported to HHS on 2023-04-07 a Hacking/IT Incident affecting 4044 individuals. Breached information located on Network Server. The business associate's third-party provider was the victim of a cyber-attack. PHI involved included names, dates of birth, addresses, member/group IDs, and gender. The BA provided credit monitoring and implemented safeguards.

Affected (this filing): 4,044

Brightline, Inc., a health sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2023-02-04 and filed notice on 2023-04-10. 26,333 Washington residents were affected. 65 days elapsed between awareness and notification. 5 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 26,333

Brightline, Inc., a virtual behavioral health provider, notified affected individuals of a data security incident involving Fortra's GoAnywhere MFT SaaS, a third-party file transfer service. On January 30, 2023, Fortra discovered suspicious activity; an unauthorized party exploited a previously-unknown vulnerability to access customer accounts and download files. Brightline learned of the incident on February 4, 2023. Exposed data included names, addresses, member IDs, dates of birth, phone numbers, employer names, group IDs, coverage dates, and for some, Social Security numbers. Brightline responded by rebuilding infrastructure, restricting access, and offering 2 years of credit monitoring via Cyberscout.

Brightline, Inc. notified the NH AG of a data breach involving its third-party vendor Fortra's GoAnywhere MFT SaaS. An unauthorized party exploited a previously unknown vulnerability to access accounts and download files starting Jan 30, 2023. Brightline learned of the incident on Feb 4, 2023. Approximately 180 NH residents were affected, with data including names, addresses, DOBs, member IDs, and some SSNs. Brightline engaged its incident response plan, retained counsel, and offered 2 years of credit monitoring.

Affected (this filing): 180

Brightline, Inc. notified consumers of a data breach involving its third-party file transfer provider, Fortra (GoAnywhere MFT SaaS). The incident, occurring around Jan 30, 2023, exploited a vulnerability to access accounts. Affected data included names, DOB, SSN, and employment info. Brightline disabled access, removed data, and offered 2 years of credit monitoring.

Brightline, Inc reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-02. The breach occurred during 1/30/2023. The breach was discovered on 2/4/2023. Notice was sent on 4/7/2023.

Brightline, Inc. notified the California AG of a data breach involving its third-party provider Fortra (GoAnywhere MFT SaaS). An unauthorized party exploited a previously unknown vulnerability on Jan 30, 2023, to access accounts and download files. Brightline became aware on Feb 4, 2023. Affected data includes names, DOB, SSN, and employment info for HP employees. No clinical data or financial accounts were involved. Brightline rebuilt infrastructure, removed data from the service, and offered 2 years of credit monitoring.

Brightline, Inc., a virtual healthcare services provider, disclosed a data security incident involving its vendor, Fortra (formerly HelpSystems). On January 30, 2023, Fortra identified unauthorized access to its GoAnywhere file transfer software. Brightline learned of the incident on February 4, 2023, and immediately engaged its incident response plan, terminating unauthorized access. The incident involved the acquisition of files containing eligibility information, including name, member ID, group ID, gender, and date of birth. Brightline is offering 24 months of complimentary identity theft restoration and credit monitoring services through Cyberscout.

Brightline, Inc., a virtual behavioral health provider, notified the California AG of a data breach affecting subscriber eligibility information. The incident stemmed from a third-party vendor, Fortra, whose GoAnywhere MFT service was compromised via a previously unknown vulnerability on January 30, 2023. Brightline became aware of the incident on February 4, 2023. Affected data included names, addresses, member IDs, dates of birth, phone numbers, and employer information. No SSNs, financial accounts, or medical records were involved. Brightline removed data from the service, implemented additional security measures, and offered 2 years of credit monitoring.