If you received a 1095-C tax form connected to Gilead Sciences and got a follow-up letter about a data breach, here’s the short version: the problem wasn’t a hack. Trusaic, the company Gilead uses to handle Affordable Care Act tax reporting, says its mailing vendor, Billing Document Specialists (BDS), printed an 18-digit number on the outside of envelopes that was visible through the window. That number included your Social Security number embedded alongside other digits. The batch went out on February 7, 2025, and Trusaic says it discovered the issue on February 18, 2025. The letter is clear that this was a mailing error, not a break-in — Trusaic states there was no intrusion into any encrypted database or internal server.
