Guard.me Health Insurance - Notice of Data Breach

Threat Level: Low
Threat Type: External Service Provider Breach
Advisory Date: 07/13/2023

Description

External Service provider, “Guard.me” has advised of a security incident that involved the personal information of some individuals affiliated with the University of Regina.

Guard.me is an health insurance provider which is primarily used by international students and researchers while traveling or studying abroad.

On June 19, 2021, Guard.me discovered suspicious activity on their website that led them to take down their website. When visiting the website, visitors are automatically redirected to a maintenance page warning that the site is down while the insurance provider increases security on the site.

Impact

Guard.me has notified the University of Regina that a small number of individual affiliated with the University of Regina have been impacted.  All individuals affected were users of Guard.me services between 2007 and June 2021.

Based on the information provided by Guard.me, impacted students’ personal information may have been accessed by this incident including:

  • Name(s)
  • Dates of birth
  • Gender
  • Encrypted Password

For a limited subset of individuals, the following data may also have been accessed:

  • Email Address(es)
  • Address(es)
  • Phone number(s)
  • Date of Birth
  • Personal Health Information 
  • Payment information (Bank Account Number) if automatic claims reimbursment was set up

Individuals will be contacted have been contacted directly by Guard.me.

Resolution

Guard.me states that they have resolved the security issue which lead to the breach and implemented new security measures.  Guard.me will communicate what remediations are available to impacted individuals.

As a best practice, we recommend you remain vigilant and promptly report any suspicious activity or suspected identity theft to Guard.me and to the proper law enforcement authorities.

Resources

Guard.me has established a dedicated call centre to answer any questions you may have about the incident. Please call at 1-888-348-1946, Monday - Friday, 8:00 a.m. – 8:00 p.m. ET with any questions you have.

If you have additional concerns, please contact the Privacy Office at the University of Regina.