Strauss Borrelli PLLC, a leading data breach law firm, is investigating SAG-AFTRA Health Plan regarding its recent data breach. The SAG-AFTRA Health Plan data breach may have involved sensitive personal information and protected health information belonging to an undetermined number of individuals.
ABOUT SAG-AFTRA HEALTH PLAN:
SAG-AFTRA Health Plan is a health benefits organization based in California. Today, SAG-AFTRA Health Plan provides health benefits to tens of thousands of eligible media professionals and their dependents around the globe.3 Specifically, earned active eligibility for health coverage under the SAG-AFTRA Health Plan is established through employment with producers who have signed Collective Bargaining Agreements with SAG‐AFTRA, an American labor union that represents approximately 160,000 media professionals.4,5 Headquartered in Burbank, California, SAG-AFTRA Health Plan employs over 50 individuals.
WHAT HAPPENED?
Recently, SAG-AFTRA Health Plan announced that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed. According to the breach notice, on September 18, 2024, SAG-AFTRA Health Plan learned that an employee’s email account had been compromised.1 As a result, SAG-AFTRA Health Plan launched an investigation to determine the nature of the incident.
Through its investigation, SAG-AFTRA Health Plan discovered that sensitive personal information belonging to SAG-AFTRA Health Plan participants in its systems may have been compromised by an unauthorized third party through the employee’s email account between September 17 and September 18, 2024. As a result, SAG-AFTRA Health Plan began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Health insurance and claims information (e.g., health plan participant identification number)
On December 2, 2024, SAG-AFTRA Health Plan posted a notice of the incident on its website. On the same day, SAG-AFTRA Health Plan began mailing notices to affected individuals. Based on the website breach notice, SAG-AFTRA Health Plan is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification that SAG-AFTRA Health Plan posted to its website is below.
If you received a breach notification letter from SAG-AFTRA Health Plan:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
LINKS:
[1] https://www.sagaftraplans.org/health/emailphishingnotice
[2] https://ago.vermont.gov/document/2024-12-02-sag-aftra-health-plan-data-breach-notice-consumers
[3] https://www.sagaftraplans.org/health/about-us
[4] https://www.sagaftraplans.org/health/eligibility
[5] https://www.linkedin.com/company/screen-actors-guild/about/
[6] https://oag.ca.gov/ecrime/databreach/reports/sb24-595543
