Kelly & Associates Insurance coverage Group (dba Kelly Advantages) is informing greater than half 1,000,000 individuals of a knowledge breach that compromised their private info.
The Maryland-based well being and life insurance coverage company has issued an replace on a safety incident it suffered final 12 months between December 12-17, when unauthorized actors breached its IT programs and stole information.
On April 9, 2025, the corporate acknowledged that the incident impacted 32,234 people. The determine was revised a number of occasions till the ultimate tally shared with authorities within the U.S. counted 553,660 people.
Kelly Advantages is a supplier of advantages consulting, enrollment expertise, payroll administration, HRIS, compliance assist, and provider administration.
As a number of organizations throughout the nation contract the agency’s providers, figuring out the scope of the info breach and the precise variety of impacted individuals was a sophisticated process.
The group’s newest replace lists a complete of 46 entities impacted by the info breach, together with healthcare giants like:
- United Healthcare
- Aetna Life Insurance coverage Firm (CVS Well being)
- CareFirst BlueCross BlueShield
- Humana Insurance coverage ACE
- The Guardian Life Insurance coverage Firm of America
- Mutual of Omaha Insurance coverage Firm
- OneAmerica Monetary Companions, Inc.
The information breach discover despatched to impacted people yesterday informs recipients of the particular information sorts impacted by the breach, which differ per particular person.
Nevertheless, the normal discover revealed on the location says that the compromised data might comprise full names, Social Safety quantity, tax ID quantity, date of beginning, medical info, medical insurance info, and monetary account info.
Publicity of this info places individuals in danger, as they’ll turn out to be victims of phishing assaults, social engineering, and scams. Impacted people are suggested to train elevated vigilance towards unsolicited communications.
To mitigate the danger, Kelly Advantages presents all letter recipients 12-month freed from cost credit score monitoring and id theft safety providers by way of IDX id theft safety.
Probably impacted people are additionally suggested to contemplate inserting a safety freeze on their credit score report and intently monitor their accounts for suspicious exercise.
Whereas cloud assaults could also be rising extra refined, attackers nonetheless succeed with surprisingly easy methods.
Drawing from Wiz’s detections throughout hundreds of organizations, this report reveals 8 key methods utilized by cloud-fluent risk actors.
