Imagine360 Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Imagine360, LLC regarding its recent data breach. The Imagine360 data breach involved sensitive personal identifiable information and protected health information belonging to an undetermined number of individuals.


Imagine360 is an insurance company specializing in health plan solutions for self-funded businesses. Accordingly, Imagine360 offers a variety of insurance services, such reference-based pricing tools, comprehensive plan processing, and support in finding health care providers. Founded in 2003, Imagine360 assists customers in the automotive, construction, technology, and manufacturing industries, and more. Additionally, Imagine360 partners with 25,000 health providers, including 1,000 CVS Minute Clinics and 6,500 Quest Diagnostic Centers. Headquartered in Wayne, Pennsylvania, Imagine360 operates more than 550 facilities and serves over 1,000 clients across the United States.


On or around January 30, 2023, Imagine360 discovered that it had experienced a data breach in which the sensitive personal identifiable information and protected health within a third-party file sharing platform, Citrix, may have been accessed. Then, on or around February 3, 2023, Imagine360 discovered an additional data breach that occurred through Fortra, a third-party vendor who oversees and operates another file sharing program used by Imagine360. Through its investigation, Imagine360 determined that an unauthorized actor may have accessed and acquired this sensitive information through Citrix or Fortra between January 28 and January 30, 2023. On June 30, 2023, Imagine360 began contacting individuals whose information may have been impacted. The type of information exposed includes:

  • Name
  • Social Security number
  • Medical information
  • Health insurance information

If you received a breach notification letter from Imagine360:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the Imagine360 data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review any breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by Imagine360, LLC;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: