HackingFinancial ServicesProfessional ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
KELLY & ASSOCIATES INSURANCE GROUP, INC.
bd_2de86b9e45551f97 · schema v1 · pii pii-v1
Full breach record for KELLY & ASSOCIATES INSURANCE GROUP, INC. →Kelly & Associates Insurance Group, Inc. (Kelly Benefits), a benefits enrollment services provider based in Sparks, MD, experienced an unauthorized external intrusion between December 12–17, 2024, in which certain files were copied and exfiltrated. The review was completed March 3, 2025. Nine Maine residents were affected (32,234 total). Exposed data includes names and Social Security numbers. The FBI was notified. Affected individuals were offered 12 months of IDX credit monitoring.
Maine clockDiscovered Mar 3, 2025 → Filed with AG Apr 9, 202537d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 13 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_5a9b20527a172016South Carolina State AGfiled 2025-04-10(1d gap)Verified
- bd_3fafc1c0156ef4afMaine State AGfiled 2025-04-21(12d gap)Verified
- bd_4471daa4ae4e993fWashington State AGfiled 2025-04-21(12d gap)Verified
- bd_57f21cc7a83923f9California State AGfiled 2025-04-21(12d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 83d gap
- bd_8787ccd7e957b339Oregon State AGfiled 2025-04-21(12d gap)Verified
- bd_d370cb9c69d7fc10Iowa State AGfiled 2025-04-21(12d gap)Verified
- bd_dc8b4a8b2afb6996Maine State AGfiled 2025-05-02(23d gap)Verified
- bd_1d9478df90e43cccMaine State AGfiled 2025-05-30(51d gap)Verified
- bd_021fda7188de0ef4Maine State AGfiled 2025-06-30(82d gap)Verified
- bd_abfe5cf4f4535a82Texas State AGfiled 2025-07-01(83d gap)Verified
Showing first 10 of 12 linked disclosures.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/047b774f-2e79-4a04-9f4c-4dd7a8b2ee8d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 9, 2025
- Raw hash
- 1cd02929ad6928bb35a41007683104abb1bddcaa2e04bd36d4b7d3378e2cf17d
Reporting entity
- Name
- KELLY & ASSOCIATES INSURANCE GROUP, INC.norm: kelly associates insurance
- Domain
- kellybenefits.com
Victim entity
- Name
- KELLY & ASSOCIATES INSURANCE GROUP, INC.norm: kelly associates insurance
- Domain
- kellybenefits.com
- Industry
- Financial ServicesllmProfessional Servicesllm
Incident
- Discovered
- Mar 3, 2025
- Materiality determined
- —
- Notification sent
- Apr 9, 2025
- Affected individuals
- 9
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Federal Bureau of InvestigationNotified Maine Attorney GeneralNotified relevant state and federal regulators
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- ME AG >30d · 37d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 3, 2025→ Filed with AG: Apr 9, 202537d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.