Imagine360, LLC recently experienced a data breach that potentially exposed sensitive personal and health information of individuals associated with its services. On January 24, 2025, Imagine360 discovered that an unauthorized party had gained access to an employee's email account on May 10, 2024, and again on May 16, 2024.
This breach allowed potential access to emails containing personal information like social security numbers and protected health information.
The breach affected 1,608 individuals in Texas and 36 individuals in Massachusetts.
Imagine360 has reported this incident to the Massachusetts Attorney General, and you can find more details in the Massachusetts Attorney General's disclosure. Additionally, the disclosure is available on the Texas Attorney General's website.
In response to the data breach, Imagine360 has taken several steps to secure its systems and prevent future incidents. Upon discovering the unauthorized access, the company completed an enterprise-wide password reset and confirmed the security of its email environment. They also conducted a thorough investigation into the breach and reviewed the emails that were potentially accessible.
Imagine360 has implemented additional security measures within its email environment and reviewed its policies and procedures to mitigate the likelihood of similar incidents occurring in the future. Affected individuals have been notified via U.S. Mail, and the company is encouraging them to remain vigilant against identity theft and fraud. Individuals are advised to monitor their account statements, explanation of benefits, and free credit reports for any suspicious activity.
For those affected, Imagine360 has set up a dedicated call center to address any questions or concerns. You can reach them at 1-877-824-0136, Monday through Friday, from 9:00 a.m. to 9:00 p.m. Eastern Time.