Every public data breach

Disclosed this week47On record26,367

47 disclosed this week · 26,367 on record

90 Degree Benefits

Disclosed Jun 9, 2022185,459 affectedConfirmed

Official notice

The business associate (BA), 90 Degree Benefits, Inc., reported that it was the victim of a hacking incident that affected the protected health information (PHI) of 185,459 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license numbers, Social Security numbers, claims information, diagnoses/conditions, lab results, medications, and other treatment and identifier information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. The CE strengthened its technical safeguards and OCR provided the CE with technical assistance.

What is known

People affected185,459 (as reported to HHS)
DisclosedJun 9, 2022
DiscoveredApr 21, 2022
HappenedJan 28, 2022
AttackHacking
Data exposedNamesHealthInsurance
SectorInsurance · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: 90 Degree Benefits
Official noticeattorneygeneral.delaware.gov
Notice letter filed with the Delaware DOJ: 90 Degree Benefits
Official noticejustice.oregon.gov
Oregon DOJ breach notice: 90 Degree Benefits
Official noticein.gov
Indiana Attorney General 2022 data breach report: 90 Degree Benefits
Official noticeocrportal.hhs.gov
HHS OCR breach report (archive, resolved): 90 Degree Benefits (Business Associate, WI)

Notices filed

Residents of DEJun 9, 2022
Delaware DOJ14 people
Residents of INJun 9, 2022
Indiana AG7,203 people
TotalJun 9, 2022
HHS archive172,450 people
Residents of CAJun 10, 2022
California AGCount not stated
Residents of ORJun 10, 2022
Oregon DOJ163,483 people
TotalFeb 8, 2023
HHS archive185,459 people
History of this record
attack2026-09-25
unknown to hackingby backfillSource
records_basis2026-09-25
organization to hhsby backfillSource
records2026-09-25
163483 to 185459by backfillSource
summary2026-09-25
empty to The business associate (BA), 90 Degree Benefits, Inc., reported that it was the victim of a hacking incident that affected the protected health information (PHI) of 185,459 individuals. The PHI involved included names, addresses, dates of bby backfillSource
source2026-09-25
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/2022-DB-Year-to-Date-Report-for-Website.pdfby backfillSource
data_types2026-09-25
[] to ["names","health","insurance"]by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 163483by backfillSource
disclosed2026-09-25
2022-06-10 to 2022-06-09by backfillSource
discovered2026-09-25
empty to 2022-04-21by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about 90 Degree Benefits