SAG-AFTRA Health Plan

The Vermont Office of the Attorney General reported that SAG-AFTRA Health Plan experienced a data breach involving the compromise of an employee email account on September 18, 2024. The breach potentially exposed the personal information of affected individuals, including names and Social Security numbers, with a total of 43 individuals reported to be impacted in Rhode Island. The breach was caused by a phishing incident, and law enforcement has been notified.

Source: https://ago.vermont.gov/document/2024-12-02-sag-aftra-health-plan-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/sag-aftra-health-plan-sag-producers-pension-plan

"id": "sag739072925",
"linkid": "sag-aftra-health-plan-sag-producers-pension-plan",
"type": "Breach",
"date": "9/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 43,
                        'industry': 'Healthcare',
                        'location': 'Rhode Island',
                        'name': 'SAG-AFTRA Health Plan',
                        'type': 'Health Plan'}],
 'attack_vector': 'Phishing',
 'data_breach': {'number_of_records_exposed': 43,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers']},
 'date_detected': '2024-09-18',
 'description': 'The Vermont Office of the Attorney General reported that '
                'SAG-AFTRA Health Plan experienced a data breach involving the '
                'compromise of an employee email account on September 18, '
                '2024. The breach potentially exposed the personal information '
                'of affected individuals, including names and Social Security '
                'numbers, with a total of 43 individuals reported to be '
                'impacted in Rhode Island. The breach was caused by a phishing '
                'incident, and law enforcement has been notified.',
 'impact': {'data_compromised': ['Names', 'Social Security numbers']},
 'initial_access_broker': {'entry_point': 'Employee email account'},
 'post_incident_analysis': {'root_causes': 'Phishing'},
 'references': [{'source': 'Vermont Office of the Attorney General'}],
 'response': {'law_enforcement_notified': True},
 'title': 'SAG-AFTRA Health Plan Data Breach',
 'type': 'Data Breach'}