SignalAtlas
Share a report
Confirmed

STRATeBEN phishing-related breach accessed health-plan member data

Unauthorised access to an employee Microsoft 365 account resulted in access to group health-plan members’ names, SSNs and dates of birth.

Last updated: 2026-11-09

Overview

Access occurred between August 14 and November 9, 2025 and was discovered December 3. Affected data was confirmed March 18, 2026 and notices mailed March 26. No count is given.

Timeline

  1. Occurred
  2. Discovered
  3. Disclosed

  4. Unauthorised access discovered.

  5. Affected data confirmed.

  6. Notices mailed.

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and described monitoring or protective resources.

What you can do

Verify notices through official channels, avoid links or attachments in unexpected messages, and do not provide credentials or account details.

Sources

  1. STRATeBEN notice and appendixOffice of the Vermont Attorney General · 2026-11-09

Related information

Share a report

No published information yet

Information appears here after source checks or moderation.

Comments and replies

Write a comment

No account needed. Comments appear immediately.

Do not post private names, addresses, passwords, or codes. Automatic masking is limited; review your content before submitting.