SAG-AFTRA Health Plan reports data breach caused by email phishing attack

SAG-AFTRA Health Plan, a Burbank-based healthcare benefits provider for media professionals, reports a data breach following the discovery of an email phishing attack.

The security incident occurred between September 17-18, 2024, when threat actors successfully compromised an employee's email account through a phishing attack. SAG-AFTRA contained the attack and started an investigation with third-party cybersecurity experts. By October 3, 2024, the investigation confirmed that sensitive information of their members had been exposed, including:

• names,
• Social Security numbers,
• health insurance information

The number of affected individuals and any potential financial impact from the breach have not been disclosed by the organization. The organization has claims that while the attack was limited to the compromised email account and that their main IT network remained secure. 

SAG-AFTRA Health Plan has sent notification letters to all affected individuals, specifying which pieces of their personal information were compromised in the incident.