On March 7, 2023, SundaySky Inc. filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights following a cybersecurity incident in which an unauthorized party copied files containing confidential consumer information. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ first names, personal email addresses, and information related to their Healthcare Savings Accounts. After confirming that consumer data was leaked, SundaySky began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.

If you received a data breach notification from SundaySky Inc., it is essential you understand what is at risk and what you can do about it. As we’ve previously mentioned in other posts, data breaches significantly increase the risk of identity theft and other frauds. And, while many breaches are preventable, companies must implement adequate data security systems to stop these attacks. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the SundaySky data breach, please see our recent piece on the topic here.

What We Know So Far About the SundaySky Breach

The available information regarding the SundaySky breach comes from the company’s filing with the U.S. Department of Health and Human Services Office for Civil Rights (“HHS-OCR”), as well as a notice posted on SundaySky’s website. According to these sources, on January 8, 2023, SundaySky determined that an unauthorized party had gained access to the company’s servers in its U.S. cloud-based environment. In response, SundaySky secured its systems, notified law enforcement, and then launched an investigation into the incident.

The SundaySky investigation confirmed that the unauthorized party was able to access certain files containing confidential consumer information. The company was also able to determine that some of these files were copied by the unauthorized actors.

Upon discovering that sensitive consumer data was made available to an unauthorized party, SundaySky began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your first name, personal email address, and information related to your Healthcare Savings Account.

On March 7, 2023, SundaySky sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

More Information About SundaySky Inc.

Founded in 2007, SundaySky Inc. is a software company based in New York, New York. SundaySky provides a Video Experience Platform that helps businesses increase revenue, reduce costs, lower churn, and increase customer satisfaction. The company maintains offices in New York City, Tel Aviv and Tokyo. SundaySky employs more than 160 people and generates approximately $33 million in annual revenue.