The California Office of the Attorney General reported on March 8, 2023, a data breach involving Epic Management LLC, which occurred on January 24, 2023. The breach resulted from a targeted phishing attack that allowed unauthorized access to certain emails and records, potentially affecting personal information including names, member ID numbers, health plan names, and premium payment amounts. The number of affected individuals is currently unknown.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-564084
TPRM report: https://www.rankiteo.com/company/epic-management-lp
"id": "epi226080425",
"linkid": "epic-management-lp",
"type": "Breach",
"date": "1/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'name': 'Epic Management LLC', 'type': 'Company'}],
'attack_vector': 'Phishing',
'data_breach': {'personally_identifiable_information': True,
'type_of_data_compromised': ['names',
'member ID numbers',
'health plan names',
'premium payment amounts']},
'date_detected': '2023-01-24',
'date_publicly_disclosed': '2023-03-08',
'description': 'A targeted phishing attack allowed unauthorized access to '
'certain emails and records, potentially affecting personal '
'information including names, member ID numbers, health plan '
'names, and premium payment amounts.',
'impact': {'data_compromised': ['names',
'member ID numbers',
'health plan names',
'premium payment amounts']},
'initial_access_broker': {'entry_point': 'Phishing Email'},
'references': [{'date_accessed': '2023-03-08',
'source': 'California Office of the Attorney General'}],
'title': 'Data Breach at Epic Management LLC',
'type': 'Data Breach',
'vulnerability_exploited': 'Human'}