Gilead Sciences, Inc. notified the California Attorney General of a data breach involving its mailing vendor, Billing Document Specialists (BDS). On February 7, 2025, BDS inadvertently mailed 1095-C tax forms with shipping labels containing visible personal information, including Social Security numbers, through envelope windows. Trusaic, which assists Gilead with ACA compliance, discovered the incident on February 18, 2025. No database intrusions occurred. Affected individuals are offered 24 months of Equifax Credit Watch Gold.