SAG-AFTRA Data Breach Exposes Social Security Numbers

On September 18, 2024, SAG-AFTRA Health Plan discovered unauthorized access to an employee’s email account. This breach was caused by a phishing email, which allowed an attacker to compromise the account.

The breach occurred between September 17 and September 18, 2024. Following this discovery, the organization launched an investigation with the assistance of third-party cybersecurity experts.

The investigation revealed that the compromised email account contained sensitive information related to some SAG-AFTRA Health Plan participants. On October 3, 2024, it was confirmed that the email account included personal data such as Social Security numbers, names, health insurance information, and claims-related details.

The breach impacted individuals in multiple states. According to the disclosure filed with the Texas Attorney General's Office, 831 individuals in Texas were affected. Similarly, a disclosure to the Massachusetts Attorney General's Office reported that 371 individuals in Massachusetts were impacted. The total number of affected individuals may be higher, as the investigation is ongoing.

Information exposed

• Names
• Social Security numbers
• Health insurance information
• Claims-related details (e.g., health plan participant identification numbers)

SAG-AFTRA Health Plan's response

SAG-AFTRA Health Plan took immediate action to address the breach. Upon discovering the unauthorized access, the organization contained and remediated the issue. They also conducted a thorough investigation with the help of cybersecurity experts to determine the scope of the breach and identify affected individuals.

To assist those impacted, SAG-AFTRA Health Plan is offering two years of complimentary identity protection services through Experian’s IdentityWorks. This service includes credit monitoring, identity restoration support, and up to $1 million in identity theft insurance. Additionally, the organization has notified law enforcement and implemented enhanced security measures to prevent similar incidents in the future.

Steps for affected individuals

If you believe you may have been affected by this data breach, there are several steps you should take to protect yourself:

1. Enroll in Experian IdentityWorks: Take advantage of the complimentary two-year membership offered by SAG-AFTRA Health Plan. This service provides credit monitoring, identity restoration, and insurance coverage. Follow the instructions in the notification letter to activate your membership.
2. Monitor your financial accounts: Regularly review your bank statements, credit card activity, and other financial accounts for any unauthorized transactions.
3. Check your credit reports: Obtain your free annual credit reports from AnnualCreditReport.com and review them for suspicious activity.
4. Place a fraud alert or credit freeze: Consider placing a fraud alert on your credit file with one of the three major credit bureaus (Experian, Equifax, or TransUnion). Alternatively, you can request a credit freeze to prevent new accounts from being opened in your name.
5. Report suspicious activity: If you notice unauthorized transactions or suspect identity theft, contact your financial institution immediately. You can also report identity theft to the Federal Trade Commission (FTC).
6. Contact SAG-AFTRA Health Plan: If you have additional questions or need further assistance, call their incident response line at 888-458-5706.

About SAG-AFTRA Health Plan

SAG-AFTRA Health Plan provides healthcare and pension benefits to participants in the entertainment industry. The organization is committed to offering high-quality services and support to its members. For more information, visit their official website.