Bay Bridge Administrators data breach hits more than 251K individuals

Texas-based employee benefit plan administrator Bay Bridge Administrators had more than 251,000 individuals' personal data compromised following a data breach in September, reports SecurityWeek. BBA had its network disrupted by a cyberattack on Sept. 5, 2022, with subsequent investigation showing that unauthorized network access had been gained by attackers around Aug. 15 and that some data had been exfiltrated on Sept. 3. Both personally identifiable information including names, birthdates, addresses, Social Security numbers, driver's license numbers, and ID numbers and protected health information were discovered to have been accessed by attackers, with BBA informing the Maine Attorney General's Office regarding the impact of the breach on Dec. 29. "The personal and protected health information involved was shared with BBA either by the individual, the individual's employer, and/or the individual's insurance carrier(s), in connection with enrollment in an employment insurance benefit plan for calendar year 2022," said BBA, which added that there has been no evidence suggesting any misuse of the compromised data.