HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICLowActive
KELLY & ASSOCIATES INSURANCE GROUP, INC.
bd_303c32a29abb8c81 · schema v1 · pii pii-v1
Full breach record for KELLY & ASSOCIATES INSURANCE GROUP, INC. →Kelly & Associates Insurance Group, Inc. filed a supplemental data event notice with the New Hampshire Attorney General on May 2, 2025, regarding unauthorized access occurring between December 12 and 17, 2024. The incident affected 595 New Hampshire residents, involving the exfiltration of names and other data elements. The company engaged third-party forensic specialists, notified the FBI, and provided credit monitoring services to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_a12b2eead3f9e018New Hampshire State AGfiled 2025-04-21(11d gap)Candidate
- bd_864ca5ef29cc3a4aNew Hampshire State AGfiled 2025-05-30(28d gap)Candidate
- bd_84dcd3063c063292New Hampshire State AGfiled 2025-06-30(59d gap)Verified
- bd_c69f40e6d4217f69Montana State AGfiled 2025-06-30(59d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/kelly-associates-insurance-20250502.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 2, 2025
- Raw hash
- 3a67e8212dc8df30274a5465228913015a4a81f9645d0c2d1c3bd216976d5a84
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- KELLY & ASSOCIATES INSURANCE GROUP, INC.norm: kelly associates insurance
- Domain
- kellybenefits.com
Incident
- Discovered
- Dec 12, 2024
- Materiality determined
- —
- Notification sent
- May 2, 2025
- Affected individuals
- 595
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this matter to the Federal Bureau of Investigationproviding written notice of this incident to relevant state and federal regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 20 weeks(141 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.