Nevada Privacy Enforcement Cases

Why the action was brought

Blackbaud’s software stored contact and demographic information, Social Security and driver’s license numbers, financial, employment, wealth, donation, and protected health information. The company allegedly failed to implement reasonable data security and remediate known gaps, enabling unauthorized network access; deficient, downplaying notifications delayed customer notice or led customers to believe notice was unnecessary, exposing millions’ information.

Why the action was brought

An unauthorized user accessed AMCA’s internal system from August 1, 2018, through March 30, 2019. AMCA failed to detect the intrusion despite warnings from payment-processing banks. The breach exposed Social Security numbers, payment card information, and sometimes medical-test names and diagnostic codes of more than 7 million individuals, including 345,447 Nevadans.

Why the action was brought

Anthem’s network was compromised in February 2014 through malware installed via a phishing email. Attackers accessed its data warehouse and harvested names, dates of birth, Social Security numbers, healthcare identification numbers, home addresses, email addresses, phone numbers, and employment information affecting 78.8 million Americans, including 764,039 Nevada residents.