2024 ECBM — unauthorized system access exposed SSNs, medical and financial data (disclosed June 2026)
Data compromised
Names, SSNs, health insurance info, financial account info, driver’s licenses, medical information
Technical writeup
Pennsylvania insurer ECBM posted a June 2026 online notice stating suspicious activity was detected around October 25, 2024 and that forensic review found unauthorized access to certain systems between October 19 and October 25, 2024. ECBM confirmed potentially compromised data categories including names, Social Security numbers, health insurance and medical information, financial account details, and driver’s license numbers. Consumer notification letters followed; an aggregate victim count was not stated in the published notice excerpt at catalog time.
Root cause
Unauthorized actor accessed ECBM systems October 19–25, 2024; detected October 25, 2024