Where does the SAG-AFTRA Health Plan case file come from?

Every entry is taken from the breach report SAG-AFTRA Health Plan lodged with the Oregon Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: SAG-AFTRA Health Plan Data Breach

This file collects the dated facts on record for the SAG-AFTRA Health Plan incident. The state report is dated March 14, 2025. The incident itself is dated September 17, 2024.

Timeline

178 days separate the incident date from the date it was reported.

September 17, 2024Incident dateWhen the filing says the breach took place.
March 14, 2025Report filed in OregonDate the notice was lodged with the Oregon Attorney General.

Case facts

Filing state: Oregon
Date reported: March 14, 2025
Incident date: September 17, 2024
Receiving office: Oregon Attorney General

Case notes

The SAG-AFTRA Health Plan has publicly reported a data security incident, filing details with regulators on March 14, 2025. This notification pertains to a breach that impacted the organization, though the full scope of the event is currently under investigation.

According to the public filing, the security incident occurred on September 17, 2024. While the report confirms that personal information was involved, the specific categories of data exposed were not detailed in the official submission.

Affected individuals in Oregon, or those who received direct notification, should be aware that their information may have been compromised. The SAG-AFTRA Health Plan has indicated that an investigation into the incident is ongoing.

Given that the specific types of exposed data are not yet public, it is prudent for anyone potentially affected to take general precautions. These steps include monitoring financial statements and credit reports for unusual activity, and being cautious of unsolicited communications requesting personal details.

Individuals should carefully review any official communications they receive from SAG-AFTRA Health Plan regarding this incident. These letters will provide the most accurate and up-to-date information specific to their situation.

Questions about this case file

Where does the SAG-AFTRA Health Plan case file come from?: Every entry is taken from the breach report SAG-AFTRA Health Plan lodged with the Oregon Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Oregon data breaches

Filing source: Oregon Attorney General

Named in the SAG-AFTRA Health Plan breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Oregon case files