HackingSupply Chain (3P Vendor)TargetedPIIIDENTITY_BASICLowContained
NationsBenefits Holdings, LLC
bd_1b538b7a6b069a1e · schema v1 · pii pii-v1
Full breach record for NationsBenefits Holdings, LLC →NationsBenefits Holding, LLC notified consumers of a data breach involving a third-party vendor, Fortra, LLC. The incident occurred around January 30, 2023, and was discovered on February 7, 2023. Personal information of beneficiaries was accessed. NationsBenefits engaged legal counsel and cybersecurity firms, notified law enforcement, and offered 24 months of credit monitoring via Experian IdentityWorks.
Vermont clock✗ VT AG >45 bday9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_27eb698b3f802e52Montana State AGfiled 2023-04-13Candidate
- bd_7a3042e338cc1200New Hampshire State AGfiled 2023-04-13Verified
- bd_e00425fe19d51b10Delaware State AGfiled 2023-04-13Verified
- bd_5cf8474b7cde8f07California State AGfiled 2023-04-14(1d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 22d gap
- bd_90ff9cd7813fad7cOregon State AGfiled 2023-05-01(18d gap)Verified
- bd_be7b07047f2e066aMaine State AGfiled 2023-05-05(22d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-04-13-nationsbenefits-holdings-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 13, 2023
- Raw hash
- a95f58591b23b89795bddf98020b5012966d52e2d5614fe30c3e93576b8b90c4
Reporting entity
- Name
- NationsBenefits Holdings, LLCnorm: nationsbenefits holdings
Victim entity
- Name
- NationsBenefits Holdings, LLCnorm: nationsbenefits holdings
Incident
- Discovered
- Feb 7, 2023
- Materiality determined
- —
- Notification sent
- Apr 13, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Fortra, LLC
- Initial access
- supply_chain
Compliance
- Time to disclose
- 9 weeks(65 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.