The SAG-AFTRA Health Plan experienced a phishing-related email breach between September 17 and September 18, 2024. The organization disclosed the incident and mailed initial participant notices on December 2, 2024, with follow-up notices sent on March 14, 2025, to additional individuals including spouses and dependents.
Exposed data types included names, Social Security numbers, health insurance information, claims information, and participant identification numbers. The breach affected 35,592 individuals. The exact scope of data for all affected individuals remains unclear.
As with all data breaches, additional details may emerge as investigations continue, and further notifications to affected individuals may be delayed.