Trusteed Plans Service Corporation (TPSC), a Washington-based consumer credit company, experienced a cybersecurity breach where an unauthorized cybercriminal accessed its network. The incident compromised the personally identifiable information (PII) of approximately 20,000 individuals, including highly sensitive data such as dates of birth, Social Security Numbers (SSNs), and health information collected through TPSC’s services to health plans and sponsors. The breach exposed individuals to risks of identity theft, financial fraud, and misuse of health data. Legal firm Lynch Carpenter, LLP is investigating potential claims for compensation on behalf of affected parties, indicating the severity of the data exposure and its legal ramifications. The breach underscores significant failures in TPSC’s cybersecurity defenses, leading to the unauthorized acquisition of critical customer data without evidence of ransomware involvement.

Trusteed Plans Service Corporation (TPSC), a third-party administrator for Skagit County’s self-insured medical plans, experienced a data breach in December 2024 where an unauthorized user accessed its systems. The incident exposed sensitive personal and health-related data of 1,099 individuals, including current and former Skagit County employees and their dependents. Compromised information may include names, dates of birth, Social Security numbers, health insurance IDs, and claims data. TPSC notified Skagit County on August 8, and public disclosure followed on October 7. While no evidence of data misuse has been found, TPSC is offering support resources to affected individuals and has reported the breach to the U.S. Department of Health and Human Services and the Washington State Attorney General’s office. The breach underscores risks tied to third-party vendors handling sensitive employee health data, though no financial or operational disruptions to Skagit County were reported.