Bridgeway Benefit Technologies LLC

Bridgeway traced the incident to a suspected employee email compromise that opened access to its systems from March to May. Benefit-plan participant data, including Social Security numbers for some people, may have been involved. Email identity was the security boundary. When that identity failed, the access lasted far longer than the initial deception.