Universal Care, Inc.

Universal Care DBA Brand New Day experienced a data breach on December 22, 2016, where a third-party vendor system allowed unauthorized access to members' protected health information (PHI), including names, DOBs, Medicare IDs, addresses, and phone numbers. The breach was discovered on December 28, 2016. The vendor corrected the error within hours. The company notified the California AG and HHS, conducted a self-audit, and implemented monthly user verification. Affected individuals received 12 months of identity theft monitoring via Experian.