Angeion Group angeiongroup.com

Angeion Group data breach: what happened and what to do

An unknown party accessed one Angeion Group employee's email box between March 30 and May 4, 2020. The Maine Attorney General lists 67,677 people affected. Exposed data could include names, Social Security numbers, IDs, health insurance and financial details. Letters went out December 4, 2020.

View all 13,177 breaches
Breach date
30 Mar 2020
Made public
4 Dec 2020
Affected
67,677
Data exposed
Names, Dates of birth, Social security numbers, Driver's licenses, Government issued IDs, Health insurance information, Bank account numbers, Credit cards
Last updated

Reviewed by Anthon Wansland

Head of Product & Co-Founder

Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.

What happened

Angeion Group is a claims administration company, the kind of firm that runs settlement payouts in class actions. In July 2020 it learned that an unknown third party had gained remote, unauthorized access to one employee's corporate email box between March 30 and May 4, 2020. The mailbox held personal information from claims administration files.

Notification letters went out on December 4, 2020. The Maine Attorney General's breach listing puts the total at 67,677 people, 34 of them in Maine.

Sources checked: maine.gov, identitytheft.gov, consumer.ftc.gov

Last verified against the official page:

How we research this Report an error

What was exposed

Per the notice Angeion filed in Maine, names together with items such as dates of birth, Social Security numbers, driver's license or government ID numbers, medical or health insurance information, and financial account or card details. What each person lost varies, so the letter you received is the list that applies to you.

The investigation couldn't determine whether the attacker viewed any particular person's information, and Angeion said it wasn't aware of any misuse.

The company's response

Angeion notified law enforcement and added employee training and security enhancements. It offered 12 months of credit monitoring, a $1,000,000 identity theft reimbursement policy and identity recovery services through IDX.

What to do if you were in it

  1. 1

    Freeze your credit at all three bureaus

    A credit freeze is free and stops lenders from seeing your credit report, which blocks most new accounts in your name. Place it separately at Equifax, Experian and TransUnion, as the FTC explains. Do this first if your letter lists a Social Security number or a government ID.

  2. 2

    Use the free monitoring if you were offered it

    Angeion offered 12 months of monitoring and recovery services through IDX; the enrollment steps are in your letter. The FTC recommends taking free credit monitoring when a company offers it. Monitoring alerts you to new activity but doesn't block it, so pair it with a freeze.

  3. 3

    Replace exposed cards and watch accounts

    If a card or bank account number was listed in your letter, ask your bank or card issuer for a new number and watch statements for charges you don't recognize.

  4. 4

    Read your insurance statements

    Check explanation of benefits statements from your insurer and question any treatment or bill you don't recognize. The FTC lists medical identity theft warning signs.

  5. 5

    Check your credit reports and statements

    Review your reports for free at annualcreditreport.com and read bank statements for charges you don't recognize. If someone uses your details, report it at IdentityTheft.gov to get a recovery plan.

  6. 6

    Check whether your email or phone is in this and other breaches

    Run a free Serus scan. It checks breach databases for your email, phone and other details, and Serus keeps watching and alerts you if they turn up in a new leak.

Official filings

Timeline

  1. The breach happened

  2. The company made it public

  3. Reported to the California Attorney General

Frequently asked

Was I affected by the Angeion Group data breach?

Angeion mailed notices on December 4, 2020. The Maine Attorney General lists 67,677 people affected in total. If you took part in a class action settlement it administered and got a letter, you were affected.

What was exposed?

Names plus, for some people, dates of birth, Social Security numbers, driver's license or government ID numbers, health insurance information and financial account or card details.

Was the data misused?

Angeion said it wasn't aware of any misuse, and the investigation couldn't tell whether the attacker viewed any specific person's data.

Should I freeze my credit?

If your letter lists a Social Security number or government ID, yes. A freeze is free and easy to lift.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Serus

Check if you're exposed in a breach with Serus

Find your leaks. Get alerted to new ones.

Run a free scan

Related guides

All guides

Related articles

All articles

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.