Financial Business and Consumer Solutions
Disclosed Apr 26, 20242 years ago1,955,385 affectedConfirmed
The covered entity (CE), Financial Business and Consumer Solutions, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 145,211 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and social security numbers, claims information, diagnoses/conditions, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. In response to the breach the CE deployed enhanced monitoring tools and security policies, implemented enhancements to its endpoint detection and response tools, performed functionality testing, rotated all privileged account passwords, and enhance network segmentation.
What is known
| People affected | 1,955,385 (as reported by the organization) |
|---|---|
| Disclosed | Apr 26, 2024 |
| Discovered | Feb 26, 2024 |
| Happened | Feb 14, 2024 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Finance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Financial Business and Consumer Solutionsoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Financial Business and Consumer Solutionsatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Financial Business and Consumer Solutionsjustice.oregon.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-04-26 Financial Business and Consumer Solutions Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Financial Business and Consumer Solutionsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Financial Business and Consumer Solutions (Business Associate, PA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Apr 26, 2024 | |
| Washington AGresidents of WA | Apr 26, 2024 | 25,175 |
| Oregon DOJresidents of OR | Apr 26, 2024 | 1,955,385 |
| Vermont AGresidents of VT | Apr 26, 2024 | |
| Indiana AGresidents of IN | Apr 26, 2024 | 72,128 |
| California AGresidents of CA | May 10, 2024 | |
| California AGresidents of CA | May 29, 2024 | |
| HHS archivetotal | Jun 4, 2024 | 117,567 |
| California AGresidents of CA | Jun 20, 2024 | |
| California AGresidents of CA | Jul 8, 2024 | |
| California AGresidents of CA | Jul 10, 2024 | |
| California AGresidents of CA | Jul 17, 2024 | |
| California AGresidents of CA | Jul 19, 2024 | |
| California AGresidents of CA | Jul 23, 2024 | |
| California AGresidents of CA | Nov 27, 2024 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Financial Business and Consumer Solutions, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 145,211 individuals. The PHI involved included names, addresses, date · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 1955385 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-04-26-financial-business-and-consumer-solutions-data-breach-notice-consumers · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2024-02-26 · backfill source
- 2026-09-25 · disclosed: 2024-05-10 to 2024-04-26 · backfill source
- 2026-09-25 · disclosed: 2024-05-29 to 2024-05-10 · backfill source
- 2026-09-25 · disclosed: 2024-06-20 to 2024-05-29 · backfill source
- 2026-09-25 · disclosed: 2024-07-08 to 2024-06-20 · backfill source
- 2026-09-25 · disclosed: 2024-07-10 to 2024-07-08 · backfill source
- 2026-09-25 · disclosed: 2024-07-17 to 2024-07-10 · backfill source
- 2026-09-25 · disclosed: 2024-07-19 to 2024-07-17 · backfill source
- 2026-09-25 · disclosed: 2024-07-23 to 2024-07-19 · backfill source
- 2026-09-25 · disclosed: 2024-11-27 to 2024-07-23 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.