Data Breach Notifications

Entity Information

  • Type of Organization: Healthcare
  • Entity Name: NASCO (Amended)
  • Street Address: 1200 Abernathy Rd NE #1000
  • City: Atlanta
  • State, or Country if outside the US: GA
  • Zip Code: 30328

Submitted By

  • Name: Lisa Sotto
  • Title: Partner
  • Firm name (if different than entity): Hunton Andrews Kurth LLP
  • Telephone Number: (212) 309 1223
  • Email Address:
  • Relationship to entity whose information was compromised: Outside legal counsel

Breach Information

  • Total number of persons affected (including residents): 1,696,867
  • Total number of Maine residents affected: 4,489
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: Yes
  • Date(s) Breach Occured: 05/30/2023
  • Date Breach Discovered: 08/21/2023
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: NASCO has provided notice to affected individuals when instructed to do so by its health plan customers. This notification process began on October 2, 2023 and was completed on January 8, 2024.
  • Copy of notice to affected Maine residents: NASCO - Individual Notification Letter Sample.pdf
  • Date of any previous (within 12 months) breach notifications: N/A
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: Experian, 24 months, identity monitoring services