United States
4 articles with this tag
Covered California Agent Data Breach: Names, License Numbers and SSN or FEIN Exposed in a Phishing Incident, and What Agents Should Do
Covered California, California's health insurance marketplace, filed a data breach notification with the California Attorney General (reported October 16, 2026). The notice to agents says that on May 13, 2026 an unauthorized individual used a phishing scheme to gain access to information relating to agents, and that agent spreadsheets were accessed. Those spreadsheets included each agent's name, agency name, license number, FEIN or Social Security number, and role within the agency. The notice does not say how many agents are affected, does not mention enrollees' (consumers') data, and does not offer credit monitoring. Covered California recommends placing a fraud alert with the three credit bureaus and following the Attorney General's Breach Help tips. This site's take: licensed agents and agency staff should place a fraud alert or credit freeze now, treat unexpected messages that cite their license number or agency as suspect, and use the contact listed in the notice.
Florida Department of Education financial aid website breach (about 4.9 million people): Social Security numbers at risk — what to do
On October 29, 2026, the Florida Department of Education announced that its staff learned on October 19 of unauthorized criminal access to the Florida Student Financial Aid website (FloridaStudentFinancialAidSG.org). The department believes the incident was limited to that website and may have affected approximately 4.9 million individuals. The information potentially exposed may include Social Security numbers, first and last names, dates of birth, home addresses, phone numbers (including mobile numbers), email addresses and gender identification codes (M or F). Not all individuals were necessarily affected. It says anyone who previously applied for financial aid in Florida may have been affected. The department says it activated its cybersecurity response protocols, notified the Florida Attorney General's office, and is working with the Florida Digital Service and the Florida Department of Law Enforcement. It says current financial aid, tuition payments, and eligibility for scholarships, grants and loans are not affected. The cause has not been published. This site's take: a Social Security number does not change, so check your credit reports, consider a fraud alert or credit freeze, and treat any message that uses your name, email or phone number and mentions this incident as suspect.
iRhythm data breach (8,179,772 people listed with HHS): Zio patient names, insurance numbers and device serial numbers taken — what patients should do
iRhythm Technologies, the US maker of the Zio wearable heart monitor, told the US SEC on June 15, 2026 that it had detected unauthorized access to certain third-party-hosted business applications and that data was taken. In a notice dated October 2, 2026 the company says its investigation found data was accessed and downloaded between June 3 and June 8, 2026, and that notices to affected people began on October 2. The data includes patient name, contact information (address, email address, phone number), patient account number, device serial number, insurance number, date of service and date of birth, and the company says it counts as protected health information under HIPAA. iRhythm has not published a total of its own. The incident appeared on the US Department of Health and Human Services (HHS) breach portal at 8,179,772 individuals, as reported by SecurityWeek and CyberInsider on October 29, 2026. Earlier state filings listed 298,647 people in Texas and 69,526 in South Carolina. The company says it found no impact on its products, clinical or medical device systems, and that it does not store payment card or financial account information. This site's take: if you were a Zio patient, expect convincing messages that use your name and insurance details, check your insurer's statements, and consider a free credit freeze.
Navigate360 breach and the Crime Stoppers tip platform (P3): what tipsters, people named in tips and US notice recipients should do
Navigate360 has published a data breach notice (the page shows no date; Reuters reports it acknowledged the breach on October 23, 2026) saying an unauthorized party copied data from one of its systems between November 21, 2025 and March 5, 2026, and that names, addresses, dates of birth, Social Security numbers and other details may be involved. Toronto Crime Stoppers says Navigate360 told it that the stolen data contained 176,859 Toronto tips from January 2022 to November 2025 and 14,973 names found in those tips, and it paused tip-taking on October 22. The Privacy Commissioner of Canada opened an investigation into Navigate360 on October 27. Navigate360's notice does not name the P3 tip platform or Crime Stoppers, no official total number of people or tips has been found, and Toronto Crime Stoppers says it has not received the text of the stolen tips. This site's take: if you ever sent a tip, assume its content could be linked to you, be careful with any message that mentions it, and use the police or a lawyer if you feel at risk.