Worldwide Services Insurance Agency, LLC (doing business as GeoBlue) reported a data breach affecting international health insurance plan enrollees. Between October 11 and 13, 2017, unauthorized parties obtained employee email credentials via a phishing scheme. The attacker may have accessed emails containing enrollee names. No evidence of misuse was found. Remediation included forensic investigation, employee phishing training, enhanced email security software, and MFA implementation. Affected individuals were offered one year of Experian IdentityWorks.