On July 17, 2024, Imagine360, LLC filed a notice of data breach with the Attorney General of Montana after discovering that an unauthorized party was able to access the contents of certain company email accounts. In this notice, Imagine360 explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information. Upon completing its investigation, Imagine360 began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Imagine360, LLC, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Imagine360 data breach. For more information, please see our recent piece on the topic here.

What Caused the Imagine360 Data Breach?

The Imagine360 data breach was only recently announced, and more information is expected in the near future. However, Imagine360’s filing with the Attorney General of Montana provides some important information on what led up to the breach. According to this source, Imagine360 serves as a third-party administrator for various health insurance plans, which is how the company came into possession of participant information.

On May 10, 2024, Imagine 360 learned that certain company email accounts may have been compromised when an unauthorized party was able to access them. In response, Imagine360 confirmed the security of its email environment and then launched an investigation into the incident.

Through its investigation, Imagine360 confirmed that certain emails and attachments containing confidential consumer information that were stored in the affected email accounts may have been accessed without authorization.

After learning that sensitive consumer data was accessible to an unauthorized party, Imagine360 reviewed the compromised files to determine what information was leaked and which consumers were impacted. Imagine360 completed this process on June 7, 2024.

On July 17, 2024, Imagine360 sent out data breach letters to anyone who was affected by the recent data security incident. While the publicly available data breach letter posted on the Montana Attorney General’s website doesn’t mention what type of information was compromised, the personalized data breach letters sent out earlier this month should provide victims with a list of what information belonging to them was compromised.

More Information About Imagine360, LLC

Imagine360, LLC is a third-party insurance administrator based out of Wayne, Pennsylvania. Imagine360 works with employers to create customized employee health plans. The company also offers standalone solutions for those companies that already have a third-party administrator. Imagine360 employs more than 25 people and generates approximately $5 million in annual revenue.