Covered California agent data exposed after May phishing attack
Original title: Covered California Agent Data Exposed In Phishing Attack
The May 13 incident exposed agents’ Social Security or federal ID numbers; the notice gives no victim count.
An attacker used phishing to gain unauthorized access to Covered California agent spreadsheets on May 13, according to a sample breach notice posted on the California attorney general’s website on October 16. Officials told agents their information was disclosed with other agents’ data. The files held names, license numbers, agency roles, and Social Security numbers or federal employment identification numbers. The notice does not say how many people were affected.
Unconfirmed: The notice does not state how many agents were affected.
- The sample letter appeared on the California attorney general site on October 16.
- Spreadsheets listed names, license numbers, and roles inside insurance agencies.
- The notice does not say identity-theft protection was offered.
Impact: Agent names, licenses, roles, and SSNs or FEINs disclosed.
- ATT&CK
- T1566 Phishing
- Victims
- Covered California
- Countries
- United States
From the original article
2 min read at databreaches.netJohn & Rusty Report: An attacker used a “phishing” strategy to get unauthorized access to Covered California agent information spreadsheets May 13, according to a sample breach notice letter posted on the California attorney general’s website Oct. 16. “As a result of this incident, your information, along with information relating to other agents, was disclosed,”...
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.