On June 30, 2023, Imagine360, LLC filed a notice of data breach with the Attorney General of Maine after discovering two data breaches at third-party vendors, both involving two different file transfer software programs. While Imagine360’s computer systems were not subject to unauthorized access, the company reports that these incidents resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers, medical information and insurance information. Upon completing its investigation, Imagine360 began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from Imagine360, LLC, it is essential you understand what is at risk and what you can do about it. As we’ve discussed in previous posts, data breaches involving your Social Security number are particularly concerning because hackers can use your SSN to steal your identity with nothing more than a few pieces of commonly available information. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the Imagine360 data breach.
What Caused the Imagine360 Breach?
The Imagine360 data breach was only recently announced, and more information is expected in the near future. However, Imagine360’s filing with the Attorney General of Maine provides some important information on what led up to the breach.
According to this source, on approximately January 20, 2023, Imagine360 detected suspicious activity within a third-party file-sharing program called Citrix. In response, Imagine360 terminated all unauthorized access, reset all passwords and secured its systems. Imagine360 then launched an investigation to determine the nature and extent of the incident and whether any consumer information was leaked as a result.
During this investigation, on February 3, 2023, Imagine360 was notified by Fortra of another data security incident involving Fortra’s file-sharing service, GoAnywhere. According to Fortra, an unauthorized actor copied data maintained on the platform belonging to Imagine360.
Ultimately, Imagine360 was able to confirm that both events compromised consumer information that had been provided to the company. The period of unauthorized access was between January 28, 2023 and January 30, 2023.
After learning that sensitive consumer data was accessible to an unauthorized party, Imagine360 reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, medical information and insurance information.
On June 30, 2023, Imagine360 sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of which information of theirs was compromised.
More Information About Imagine360, LLC
Imagine360, LLC is a health plan company based in Wayne, Pennsylvania. Imagine360 develops health plan solutions for employers, helping them save money while providing tailored plans to employees. The company also created Your Health Plan, a self-funded health plan solution customized for business owners and their employees, as an alternative to a PPO. Imagine360 generates $178 million in annual revenue.
