On January 6, 2023, SAIF Corporation filed notice of a data breach with the Attorney General of Texas after the company experienced what it characterized as a “brief period of unauthorized access” to its computer network. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, Social Security numbers, driver’s license numbers, financial account numbers, health insurance policy numbers, and medical history information. After confirming that consumer data was leaked, SAIF began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.
If you filed for workers’ compensation benefits in Oregon, SAIF may have processed your claim. If so, your information would be contained in the company’s electronic databases, which were recently targeted by hackers. Of course, when you provided SAIF with your personal information, the security of your information wasn’t on your mind because you assumed a company as large as SAIF would do everything possible to protect your data. However, news of the recent SAIF data breach may call the company’s commitment to protecting your information into question. As we’ve discussed in previous posts, data breaches like these greatly increase your risk of being the target of identity theft and other frauds. Therefore, it is essential that anyone who receives a SAIF data breach letter take all necessary precautions to protect themselves. Additionally, if it turns out that SAIF was negligent in how it stored your information, you may be entitled to financial compensation through a data breach lawsuit.
What We Know So Far About the SAIF Corp. Breach
The available information regarding the SAIF Corp. breach comes from the company’s filing with the Attorney General of Texas, as well as a notice posted on the SAIF website. According to these sources, on October 24, 2022, SAIF first learned that an unauthorized party was able to breach the company’s computer system. SAIF has not yet disclosed how an unauthorized party was able to do so. However, in response, the company secured its network, contacted law enforcement, and began working with a third-party cybersecurity firm to investigate the incident and determine what, if any, consumer information was leaked as a result.
The SAIF investigation confirmed that an unauthorized party was able to access the company’s computer network. Subsequently, on October 27, 2022, the company’s investigation revealed that the unauthorized actor likely was able to acquire information belonging to certain consumers as a result of the cyberattack.
Upon discovering that sensitive consumer data was made available to an unauthorized party, SAIF Corp. began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, driver’s license number, financial account number, health insurance policy number, and medical history information.
On January 6, 2023, SAIF Corp. sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident. There is not currently an estimate of the number of people affected by the SAIF data breach; however, the company insures more than 55,000 individuals.
More Information About SAIF Corporation
Founded in 1914, SAIF Corporation is a not-for-profit, state-chartered workers' compensation insurance company based in Salem, Oregon. SAIF is the largest provider of workers’ compensation insurance in Oregon, commanding a 55% market share. As of December 2021, SAIF insured over 55,000 people. SAIF operates six regional offices across the state, including in Bend, Eugene, Medford, North Bend, Portland, and Salem. SAIF Corp. employs more than 901 people and generates approximately $973 million in annual revenue.
