MedicareSupplement.com
NJCCIC Data Breach Notification
Original Release Date: 7/8/2019
Summary
MedicareSupplement.com, an insurance marketing website that assists users in finding supplemental medical insurance, has experienced a breach of approximately five million records. The unsecured MongoDB database is linked to the company’s marketing leads and was quickly secured upon notification. Compromised information includes full names, postal and email addresses, dates of birth, gender, phone numbers, and IP addresses. Nearly 239,000 of these exposed records included areas of interest, such as cancer insurance. Users affected by this breach could potentially become targets of social engineering schemes in the future. More information about this data exposure incident can be found in the Bleeping Computer article.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.