iSpace, Inc. Data Breach Investigation

Published June 22, 2023

If iSpace mailed you a data-breach notice, your Social Security number and health-insurance details may have been exposed in the early-2023 incident — here is who may qualify.

By Steve Levine

Editor-in-Chief

What is the iSpace, Inc. Data Breach About?

iSpace, Inc. is a technology company which provides support to other businesses across various sectors. iSpace specializes in insurance eligibility services. On May 31, 2023, the company announced that their computer network had been breached by hackers and confidential customer information exposed. This information belongs to customers of many of iSpace's client companies. They announced that 24,382 people were involved in the cyber attack, which was originally noticed on February 5, 2023.

After a forensic cybersecurity investigation was conducted, it was revealed that in this security incident, the unauthorized third party was able to access to personally identifiable data. The data was exfiltrated (basically, stole from private servers) some time between January 30, 2023 and February 5, 2023. iSpace, Inc. made the California Attorney General aware of the data breach as part of compliance. The forensic investigation was completed on March 3, 2023, at which time notices were begun to be sent out to individuals whose data may have been breached. The following personal information may have been exposed:

• Names,
• Social Security Numbers,
• Dates of Birth,
• Health Insurance Information,
• Medical Information,
• Diagnosis Information,
• Health Insurance Group and Policy Numbers,
• Subscriber Numbers,
• Prescription Information.

Data breaches are serious matters that can cause long term damage. Hackers break into networks so that they can steal your personal information to sell it on the dark web, commit identity theft, financial theft or other types of fraud.

Status Active Investigation 24,382 people notified after the February 2023 iSpace network intrusion

Claim Deadline Ongoing no claim form is available yet

Estimated Payout Varies depends on any future settlement and documented harm

Proof Required Yes the iSpace breach-notice letter you received

What Should I Do If My Data Was Hacked?

If you believe you have been the victim of the iSpace data breach, and may have received a notice, there are several steps you should take to protect yourself and mitigate the potential damage. These apply more broadly to a wider plethora of data breach cases:

Stay Calm: Discovering a data breach can be alarming, but it's important to remain calm and take immediate action to protect your information.
Confirm the Breach: Verify that the data breach has actually occurred and that your personal information has been compromised. Look for official announcements from the affected organization or reputable sources reporting the breach.
Change Your Passwords: Start by changing the passwords for the affected account(s) immediately. Choose strong, unique passwords that are not easily guessable. It's best to use a password manager to securely store and generate passwords.
Enable Two-Factor Authentication (2FA): Activate two-factor authentication for all your online accounts whenever possible. This adds an extra layer of security by requiring a secondary verification method, such as a temporary code sent to your mobile device, in addition to your password.
Monitor Your Accounts: Regularly monitor your financial and online accounts for any suspicious activity. Keep an eye out for unauthorized transactions, unfamiliar logins, or changes to your personal information.
Notify Your Bank/Credit Card Companies: If your financial information has been compromised, contact your bank and credit card companies immediately. Report the breach and inquire about any additional security measures they can provide, such as monitoring your accounts for fraudulent activity.
Check Your Credit Reports: Request a free copy of your credit report from one of the major credit reporting agencies (Equifax, Experian, or TransUnion). Review the report for any unauthorized accounts or inquiries. Consider placing a fraud alert or credit freeze on your accounts for added protection.
Be Vigilant Against Phishing Attempts: Data breaches often lead to an increase in phishing attempts. Be cautious of suspicious emails, messages, or phone calls asking for personal information. Avoid clicking on suspicious links or downloading attachments from unknown sources.
Update Software and Use Antivirus Protection: Ensure that your computer, smartphone, and other devices are running the latest software updates. Install reputable antivirus and anti-malware software to protect against potential threats.
Stay Informed and Seek Assistance: Keep yourself updated on the progress of the data breach investigation. The affected organization may provide guidance or resources for affected individuals. If necessary, consider seeking legal advice or contacting relevant authorities for further assistance.