Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedPIICREDENTIALSIDENTITY_BASICLowContained
Benefits Partner, LLC
bd_10aac3957962cece · schema v1 · pii pii-v1
Full breach record for Benefits Partner, LLC →Benefits Partner, LLC (dba Salus Group) notified consumers of a data breach where an employee's email account was compromised on October 9, 2024, likely via phishing. Unauthorized access occurred, potentially exposing PII and credentials. The company engaged forensic investigators, reset credentials, and offered Kroll identity monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday26 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_6ba1ebe57aa532dbNew Hampshire State AGfiled 2025-04-07Verified
- bd_e5cfb6bd94dd69c8Washington State AGfiled 2025-04-07Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-07-benefits-partner-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 7, 2025
- Raw hash
- 4a2e1183431d257a2eda1e1212986608c5183e36cf650b9c22adc0b93852d604
Reporting entity
- Name
- Benefits Partner, LLCnorm: benefits partner
Victim entity
- Name
- Benefits Partner, LLCnorm: benefits partner
Incident
- Discovered
- Oct 9, 2024
- Materiality determined
- —
- Notification sent
- Apr 7, 2025
- Affected individuals
- Not disclosed
- Data types
- PIICREDENTIALSIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 26 weeks(180 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.