HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Decisely Insurance Services, LLC
bd_40a0cf061129ec59 · schema v1 · pii pii-v1
Full breach record for Decisely Insurance Services, LLC →Decisely Insurance Services, LLC reported a data security incident affecting approximately 75 New Hampshire residents. The incident involved unauthorized access to Decisely's cloud storage platform, beginning December 16, 2024, with suspicious activity detected on December 17, 2024. Compromised data included SSNs, DOBs, and financial account numbers. Decisely engaged forensic experts, notified the FBI, and sent notifications on June 13, 2025, offering credit monitoring.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_0931d05286c611d0California State AGfiled 2025-06-14(2d gap)Verified
- bd_986d7ab39eab395bWashington State AGfiled 2025-06-14(2d gap)Verified
- bd_5233e95df693874aHHS OCRfiled 2025-06-13(3d gap)Verified
- bd_1d639799a42e9cf4New Hampshire State AGfiled 2025-07-21(35d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 35d gap
- bd_3cd648a83eb0bdd4California State AGfiled 2025-07-21(35d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/decisely-20250616.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 16, 2025
- Raw hash
- d38eb7e9ed45e0007ad754e3c98c86ee2f6c7e8b7304e36041363664b3b19224
Reporting entity
- Name
- Decisely Insurance Services, LLCnorm: decisely insurance
Victim entity
- Name
- Decisely Insurance Services, LLCnorm: decisely insurance
Incident
- Discovered
- Dec 17, 2024
- Materiality determined
- May 29, 2025
- Notification sent
- Jun 13, 2025
- Affected individuals
- 75
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 26 weeks(181 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.