90 Degree Benefits, St. Paul reported a data breach involving unauthorized access to an employee's email account on October 18, 2024. The breach potentially affected individuals' names, Social Security numbers, and member identification numbers, but no medical claims or financial account information was compromised. The breach was reported on April 18, 2025, and approximately 8 Rhode Island residents may be impacted.
Source: https://ago.vermont.gov/document/2025-04-18-90-degree-benefits-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/90-degree-benefits
"id": "90-208072625",
"linkid": "90-degree-benefits",
"type": "Breach",
"date": "10/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 8,
'industry': 'Healthcare',
'location': 'St. Paul',
'name': '90 Degree Benefits',
'type': 'Company'}],
'attack_vector': 'Email Compromise',
'data_breach': {'number_of_records_exposed': 8,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Member identification numbers']},
'date_detected': '2024-10-18',
'date_publicly_disclosed': '2025-04-18',
'description': "Unauthorized access to an employee's email account "
"potentially compromising individuals' names, Social Security "
'numbers, and member identification numbers.',
'impact': {'data_compromised': ['Names',
'Social Security numbers',
'Member identification numbers']},
'initial_access_broker': {'entry_point': 'Email Compromise'},
'references': [{'date_accessed': '2025-04-18',
'source': 'Cyber Incident Description'}],
'title': 'Data Breach at 90 Degree Benefits',
'type': 'Data Breach'}