90 Degree Benefits Data Breach Lawsuit Investigation
Did a letter from 90 Degree Benefits land in your mailbox? It means your Social Security number, medical details, and other private data may already be in the wrong hands. Act now to secure your identity and learn whether you can file a legal claim for compensation.
What Happened?
HPHG, LLC, doing business as 90 Degree Benefits, discovered suspicious activity in an employee’s email account on . A forensics investigation confirmed that an unauthorized actor accessed certain emails and attachments until . Those messages contained sensitive personal and health information for thousands of plan members.
Timeline of Key Events
- Oct 18 2024: Unusual email activity detected.
- Dec 17 2024: Scope of data exposure confirmed.
- Apr 08 2025: Breach reported to the Texas Attorney General.
- Apr 18 2025: Federal breach report filed with the U.S. Department of Health & Human Services.
- Apr 19 2025: Notification submitted to the California Attorney General and letters mailed to victims.
Data Exposed
The compromised mailbox held both personally identifiable information (PII) and protected health information (PHI), including:
- Full names
- Social Security numbers
- Dates of birth
- Addresses & government ID numbers
- Medical and health-insurance information
- Financial details such as member ID or plan account numbers
At least 5,317 individuals across Texas, Massachusetts, and Rhode Island were notified.
Download Official Notice (PDF)
Company Response & Assistance Offered
90 Degree Benefits says it took immediate steps to secure the breached account, engaged cybersecurity experts, and retrained staff. Impacted members received access to Experian IdentityWorks credit monitoring and identity restoration services. A toll-free help line—866-530-9923 (Mon-Fri, 8 a.m.–8 p.m. CT)—is available for questions.
Your Action Plan
- Enroll in the complimentary Experian monitoring service before the deadline in your letter.
- Review credit reports, Explanation of Benefits (EOBs), and medical bills for unfamiliar charges.
- Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion.
- Report suspected identity theft to the FTC, local law enforcement, and your state Attorney General.
- Consult with a data-breach attorney to learn whether you qualify for compensation.
Potential Legal Claims
Even without confirmed fraud, courts have increasingly recognized the time, anxiety, and out-of-pocket costs victims incur after a data breach. A successful lawsuit can seek damages for:
- Costs of credit monitoring and identity restoration
- Time spent resolving fraud issues
- Reimbursement for unrecovered losses
- Enhanced credit- or identity-protection services going forward
- Punitive damages where allowed
If you received a notice, you may be eligible to join a class action or individual claim. Document any unusual activity, keep all correspondence, and speak with counsel promptly to preserve your rights.
Frequently Asked Questions
What exactly happened in the 90 Degree Benefits data breach?
An unauthorized actor accessed a single employee’s email account, allowing them to view messages and attachments that contained personal and health information.
Which data of mine might be at risk from 90 Degree Benefits?
Names, Social Security numbers, dates of birth, addresses, government ID numbers, and sensitive medical or insurance details were involved.
Is 90 Degree Benefits offering free credit monitoring?
Yes. Impacted individuals can enroll in complimentary Experian IdentityWorks credit monitoring and identity restoration services for a limited time.
Can I sue 90 Degree Benefits over the breach?
Possibly. If your information was compromised, you may be entitled to compensation for the risk and inconvenience. Consult a data-breach attorney to explore your options.
How can I best protect myself after this breach?
Act quickly: enroll in the offered monitoring, set fraud alerts, routinely check credit and medical statements, and keep records of any suspicious activity.