Top Data Breaches of the Week: January 3rd, 2025

Stay informed on the latest data breaches to protect yourself and your information. If you’ve been impacted by the following data breaches, please contact Morgan & Morgan today for a free, no-obligation consultation.

Here's what you need to know:

ConnectOnCall Patient Data Breach

What happened?
ConnectOnCall, a telehealth platform owned by Phreesia, experienced a data breach where an unauthorized third party accessed its systems, compromising sensitive patient information.

When?
The unauthorized access occurred between February 16, 2024, and May 12, 2024.

Who is affected?
Approximately 914,138 patients who used ConnectOnCall's services during the specified period are affected by this breach.

What type of data was exposed?
The compromised information includes names, phone numbers, dates of birth, medical record numbers, and details related to health conditions, treatments, or prescriptions. In some instances, Social Security numbers were also exposed.

What should I do?

• Monitor your accounts for unauthorized activity.
• Enable two-factor authentication (2FA) on your accounts.
• Be cautious of phishing attempts.
• Consider freezing your credit and using identity theft protection services.

RBFCU Customer Data Breach

What happened?
Randolph Brooks Federal Credit Union (RBFCU) reported a data breach involving unauthorized access to customer information due to a physical breach of one of its ATMs.

When?
The breach was reported to the Texas Attorney General’s Office on December 27, 2024.

Who is affected?
Approximately 4,607 RBFCU customers may have had their banking information exposed.

What type of data was exposed?
Potentially compromised information includes names, debit card numbers, and account numbers.

What should I do?

• Monitor your accounts for unauthorized activity.
• Enable two-factor authentication (2FA) on your accounts.
• Be cautious of phishing attempts.
• Consider freezing your credit and using identity theft protection services.

ZAGG Payment Information Breach

What happened?
ZAGG Inc., a consumer electronics accessories maker, reported a data breach where hackers compromised a third-party application, FreshClick, provided by their e-commerce platform, BigCommerce. Malicious code was injected into the app, leading to the theft of customers' credit card information.

When?
The unauthorized access occurred between October 26, 2024, and November 7, 2024.

Who is affected?
Customers who made purchases on ZAGG.com during the specified period may have had their personal and payment information compromised. The exact number of affected individuals has not been disclosed.

What type of data was exposed?
The compromised information includes names, addresses, and payment card details entered during the checkout process.

What should I do?

• Monitor your accounts for unauthorized activity.
• Enable two-factor authentication (2FA) on your accounts.
• Be cautious of phishing attempts.
• Consider freezing your credit and using identity theft protection services.

If you’ve been impacted by one of these breaches and believe you may be entitled to compensation, contact Morgan & Morgan today for a free, no-obligation consultation.