HackingProfessional ServicesFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDownstream VictimsDelayed DiscoveryPIIIDENTITY_GOVERNMENTHighResolved
KELLY & ASSOCIATES INSURANCE GROUP, INC.
bd_021fda7188de0ef4 · schema v1 · pii pii-v1
Full breach record for KELLY & ASSOCIATES INSURANCE GROUP, INC. →Kelly Benefits (benefit enrollment services) suffered an external system breach Dec 12-17, 2024; files containing names and SSNs were copied. Discovery completed Mar 3, 2025 via forensic review. 18,855 Maine residents affected (553,660 total). Incident reported to FBI. 12-month IDX credit monitoring offered. Downstream clients include Enterprise Community Partners, Smartlink, and VSP Vision Care.
Maine clockDiscovered Mar 3, 2025 → Filed with AG Jun 30, 2025119d ✗ ME AG >90d17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 13 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_abfe5cf4f4535a82Texas State AGfiled 2025-07-01(1d gap)Verified
- bd_1d9478df90e43cccMaine State AGfiled 2025-05-30(31d gap)Verified
- bd_dc8b4a8b2afb6996Maine State AGfiled 2025-05-02(59d gap)Verified
- bd_3fafc1c0156ef4afMaine State AGfiled 2025-04-21(70d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 82d gap
- bd_4471daa4ae4e993fWashington State AGfiled 2025-04-21(70d gap)Verified
- bd_57f21cc7a83923f9California State AGfiled 2025-04-21(70d gap)Verified
- bd_8787ccd7e957b339Oregon State AGfiled 2025-04-21(70d gap)Verified
- bd_d370cb9c69d7fc10Iowa State AGfiled 2025-04-21(70d gap)Verified
- bd_5a9b20527a172016South Carolina State AGfiled 2025-04-10(81d gap)Verified
- bd_2de86b9e45551f97Maine State AGfiled 2025-04-09(82d gap)Verified
Showing first 10 of 12 linked disclosures.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e7612d08-6785-4657-b54f-8800bd928bc5.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2025
- Raw hash
- 9b023064917f3cffb673a166b51a486f8a968033f93d3959a15f93d7bfa0f6a5
Reporting entity
- Name
- KELLY & ASSOCIATES INSURANCE GROUP, INC.norm: kelly associates insurance
- Domain
- kellybenefits.com
- Industry
- Benefit enrollment services
Victim entity
- Name
- KELLY & ASSOCIATES INSURANCE GROUP, INC.norm: kelly associates insurance
- Domain
- kellybenefits.com
- Industry
- Benefit enrollment services
- Industry
- Professional ServicesllmFinancial Servicesllm
Incident
- Discovered
- Mar 3, 2025
- Materiality determined
- —
- Notification sent
- Jun 30, 2025
- Affected individuals
- 18,855
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Federal Bureau of Investigation
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- ME AG >90d · 119dME resident >60d · 119d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 3, 2025→ Filed with AG: Jun 30, 2025119d 90 days ME AG >90d Maine Discovered: Mar 3, 2025→ Notified: Jun 30, 2025119d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.