HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICLowContained
Decisely Insurance Services, LLC
bd_3cd648a83eb0bdd4 · schema v1 · pii pii-v1
Full breach record for Decisely Insurance Services, LLC →Decisely Insurance Services, LLC notified the California AG of a data security incident. On December 17, 2024, the company discovered suspicious activity related to its cloud storage platform. Investigation determined that data may have been acquired on December 16, 2024. The incident involved personal information including names and other data elements. Decisely engaged cybersecurity experts, secured the environment, reported to law enforcement, and is providing identity monitoring services through Kroll. No evidence of fraudulent misuse was found.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_1d639799a42e9cf4New Hampshire State AGfiled 2025-07-21Verified
- bd_40a0cf061129ec59New Hampshire State AGfiled 2025-06-16(35d gap)Verified
- bd_0931d05286c611d0California State AGfiled 2025-06-14(37d gap)Verified
- bd_986d7ab39eab395bWashington State AGfiled 2025-06-14(37d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 38d gap
- bd_5233e95df693874aHHS OCRfiled 2025-06-13(38d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-605850
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 21, 2025
- Raw hash
- 16791fb0cfe7636a651845c2400292abc500b404f82697e2db68ff7ecd039a0b
Reporting entity
- Name
- Decisely Insurance Services, LLCnorm: decisely insurance
Victim entity
- Name
- Decisely Insurance Services, LLCnorm: decisely insurance
Incident
- Discovered
- Dec 17, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement
Compliance
- Time to disclose
- 31 weeks(216 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.