FlexCare Sends Out Data Breach Letters Following Email Compromise

Console and Associates, P.C.
Contact

On March 5, 2025, FlexCare, LLC (“FlexCare”) filed a notice of data breach with the Attorney General of Vermont after discovering that an unauthorized party was able to access an employee’s email account. In this notice, FlexCare explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information. Upon completing its investigation, FlexCare began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from FlexCare, LLC, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the FlexCare data breach. For more information, please see our recent piece on the topic here.

What Caused the FlexCare Data Breach?

The FlexCare data breach was only recently announced, and more information is expected in the near future. However, FlexCare’s filing with the Attorney General of Vermont provides some important information on what led up to the breach. According to this source, on October 9, 2024, FlexCare detected suspicious activity within an employee’s email account. In response, FlexCare secured the account and then launched an investigation to learn more about the incident and what, if any, consumer information may have been exposed.

Through its investigation, FlexCare learned that the employee email account was subject to unauthorized access, including certain emails and attachments containing confidential consumer information.

After learning that sensitive consumer data was accessible to an unauthorized party, FlexCare reviewed the compromised files to determine what information was leaked and which consumers were impacted. FlexCare recently completed this process.

On March 5, 2025, FlexCare sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About FlexCare, LLC

FlexCare, LLC is a digital health provider offering telemedicine, teledentistry, behavioral health, dermatology, and virtual primary care services through a cloud-based platform accessible via phone, video, or app. The company also operates FlexCare Medical Staffing, a healthcare staffing agency specializing in travel nursing, therapy, and allied healthcare placements. Headquartered in Roseville, California, FlexCare has approximately 500 employees and generates $210 million in annual revenue.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations. Attorney Advertising.

© Console and Associates, P.C.

Written by:

Console and Associates, P.C.
Contact
more
less

PUBLISH YOUR CONTENT ON JD SUPRA NOW

  • Increased visibility
  • Actionable analytics
  • Ongoing guidance

Console and Associates, P.C. on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide