On March 21, 2025, Fundamental Administrative Services, LLC (“Fundamental”), a Maryland-headquartered service provider to long-term care facilities, notified HHS of a breach involving unauthorized access to its network. At the time, they used a “500” placeholder for the number affected, but also posted a substitute notice on their website. This week, Fundamental issued a press…
NYDFS Secures $2 Million Cybersecurity Settlement with Healthplex, Inc.
There is an update to a phishing incident in 2021 that impacted more than 89,000 people with Healthplex dental insurance. DataBreaches notes that the NYDFS settlement announced below is not the first settlement stemming from this incident. In December 2023, the NY Attorney General’s Office announced a $400,000 settlement with Healthplex. Both the 2023 and…
Thousands more Afghans affected by second data breach, ministers say
Serena Barker-Singh reports: Up to 3,700 Afghans brought to the UK between January and March 2024 have potentially been impacted as names, passport details and information from the Afghan Relocations and Assistance Policy has been compromised again, this time by a breach on a third party supplier used by the Ministry of Defence (MoD). This was not…
Kokomo24/7, provider of telehealth services for LAUSD students, reports data breach
Mallika Sheshadri reports: Kokomo Solutions, a technology vendor that provides Los Angeles Unified School District students with telehealth services and a tip line to report suspicious activity, has fallen prey to a data breach. The company noticed “unusual activity on our computer network” on Dec. 11, 2024 — but did not file a data breach notice with the…
UK: HMRC sacks dozens of staff for snooping on taxpayers
Neil Shaw reports: HM Revenue and Customs (HMRC) has revealed that hundreds of staff have accessed the records of taxpayers without permission or breached security in other ways. HMRC dismissed 50 members of staff last year for accessing or risking the exposure of taxpayers’ records, according to The Telegraph. 354 tax employees have been disciplined for…
Keenan & Associates settles 2023 data breach litigation for $14M
Keenan & Associates is a benefits consulting and insurance brokerage provider in California, providing services to several sectors, including healthcare entities and educational facilities. Between August 21, 2023 and August 27, 2023, an unauthorized user accessed information relating to certain of Keenan’s customers, including names, dates of birth, Social Security numbers, passport numbers, driver’s license…