90 Degree Benefits
Disclosed Jun 9, 20224 years ago185,459 affectedConfirmed
The business associate (BA), 90 Degree Benefits, Inc., reported that it was the victim of a hacking incident that affected the protected health information (PHI) of 185,459 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license numbers, Social Security numbers, claims information, diagnoses/conditions, lab results, medications, and other treatment and identifier information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. The CE strengthened its technical safeguards and OCR provided the CE with technical assistance.
What is known
| People affected | 185,459 (as reported to HHS) |
|---|---|
| Disclosed | Jun 9, 2022 |
| Discovered | Apr 21, 2022 |
| Happened | Jan 28, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health, Insurance |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: 90 Degree Benefitsoag.ca.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: 90 Degree Benefitsattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: 90 Degree Benefitsjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: 90 Degree Benefitsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): 90 Degree Benefits (Business Associate, WI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Jun 9, 2022 | 14 |
| Indiana AGresidents of IN | Jun 9, 2022 | 7,203 |
| HHS archivetotal | Jun 9, 2022 | 172,450 |
| California AGresidents of CA | Jun 10, 2022 | |
| Oregon DOJresidents of OR | Jun 10, 2022 | 163,483 |
| HHS archivetotal | Feb 8, 2023 | 185,459 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 163483 to 185459 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), 90 Degree Benefits, Inc., reported that it was the victim of a hacking incident that affected the protected health information (PHI) of 185,459 individuals. The PHI involved included names, addresses, dates of b · backfill source
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/2022-DB-Year-to-Date-Report-for-Website.pdf · backfill source
- 2026-09-25 · data_types: [] to ["names","health","insurance"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 163483 · backfill source
- 2026-09-25 · disclosed: 2022-06-10 to 2022-06-09 · backfill source
- 2026-09-25 · discovered: empty to 2022-04-21 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.