Phishing attack on People Inc. affected around 1,000 persons

People Inc. came to know about the data security incident involving PHI (Protected Health Information) of some current as well as former clients. The phishing attack on People Inc. has affected around 1,000 persons.

People Inc. found that email account of an employee of People Inc. was accessed by an unknown individual on Feb. 19, 2019. Upon learning about this information, the organization immediately has reset the password that was required to access that impacted account. An independent forensics company was also hired by People Inc. to determine what has happened, and whether any personal information has been accessed or acquired without any authorization due to this incident. Due to this investigation, the organization finds that email account of another employee might also have been impacted. That impacted account is now no longer operational.

On Apr. 11, 2019, because of this investigation, the organization learned that those two compromised email accounts contain personal information of some current as well as former clients. The personal information might have included the names, health insurance information, Social Security numbers, medical information, financial account information, addresses, and/or driver's license numbers or various government identification numbers.

The organization wrote in a statement that "People Inc. has no evidence indicating that any information aside from the information contained within the two employee email accounts was impacted in connection with this incident. In addition, People Inc. has no evidence that any of the information potentially involved in this incident has been misused".

People Inc. takes security of all the information very seriously. The organization has already reported this incident to Federal Bureau of Investigation, and will cooperate whenever required to catch the perpetrators who are accountable. People Inc. notified the possibly impacted individuals on May 29, 2019, and provided resources to help them. The notification letters include information regarding this incident, and also steps that possibly impacted individuals could take to monitor as well as help protect the personal information.

Moreover, toll-free call center was also established by People Inc. to answer the questions regarding this incident, as well as to address the related concerns. Furthermore, People Inc. is offering free identity protection services via Experian to possibly impacted individuals as a precaution.

» SPAMfighter News - 6/18/2019