Phishing Attack Exposes Covered California Agent Data

A phishing incident led to unauthorized access to Covered California agent information spreadsheets on 13 May, according to a sample breach notice letter published by the California attorney general. The letter states that, as a result of the incident, information relating to agents—along with information pertaining to other agents—was disclosed.

The breach affected spreadsheets containing agents’ names, license numbers, roles within insurance agencies, and Social Security numbers or federal employment identification numbers. The article notes that the breach notice does not specify how many individuals were affected.

The report attributes the breach to a phishing strategy used by the attacker and cites the sample breach notice letter as its source. It also mentions that breach notices often include offers of identity theft protection services for consumers, though it is unclear whether such measures are being offered to affected agents in this case. No further details on remediation steps or potential third-party disclosures are provided in the cited material. The post directs readers to BenefitPro for additional coverage and links to related coverage on John & Rusty.