Tandem Diabetes Care, Inc. data breach (2020)

CALIFORNIAHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed Mar 17, 2020bd_115a67d17b94defa

Tandem Diabetes Care, Inc. reported to HHS on 2020-03-17 a Hacking/IT Incident affecting 140,781 individuals. Breached information located on Email. The cyber-attack involved electronic protected health information (ePHI) including names, dates of birth, addresses, Social Security numbers, diagnoses, medications, and treatment information. The entity provided substitute notice on its website and complimentary identity and credit monitoring services. The CE revised HIPAA security procedures and implemented additional technical safeguards.

Affected (this filing): 140,781

🦫Oregon State AGlinked via same-victim cross-source · 100%

🦬Montana State AGlinked via multistate filing link · 100%

Filed Mar 17, 2020bd_6c63dab2a1b5df4d

Tandem Diabetes Care, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2020-03-17. The breach occurred on 1/17/2020. 815 Montana residents were affected.

Affected (this filing): 815

🐻California State AGlinked via same-victim cross-source · 100%

Filed Mar 17, 2020bd_967313c2bc1de98b

Tandem Diabetes Care experienced a phishing incident where an unauthorized person gained access to employee email accounts between January 17 and January 20, 2020. The breach potentially exposed personal information including names, contact details, Social Security numbers, product usage data, and clinical diabetes therapy data. The company secured the accounts, engaged a cybersecurity firm, and offered one year of identity protection services to affected individuals.

TANDEM DIABETES CARE, INC.

Litigation Timing

Timeline