HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEMPLOYMENTMediumContained
US Benefits
bd_5a9fdc1536a68548 · schema v1 · pii pii-v1
Full breach record for US Benefits →Benefits Management Group, Inc. (BMGI) experienced unauthorized access to its computer systems between October 24 and December 2, 2024. The incident was discovered on November 26, 2024. An unauthorized actor copied files containing personal information of individuals associated with pension and health plans administered by BMGI. Affected data may include names, Social Security numbers, dates of birth, and health plan information. BMGI secured its systems, conducted an investigation, and is offering credit monitoring services to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_4a8ff93bae51d528Oregon State AGfiled 2025-07-17Candidate
- bd_5dd79b9c22b6bdc7Montana State AGfiled 2025-07-17Verified by operator
- bd_6940d64facba0433New Hampshire State AGfiled 2025-07-17Verified
- bd_92ba1ac53ee76546Texas State AGfiled 2025-07-18(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-605620
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 17, 2025
- Raw hash
- 54bffb1a3f5d7667d28fa75fe018e8cb3bf8b442e6ae0b63971bede06eacf2ff
Reporting entity
- Name
- US Benefitsnorm: us benefits
Victim entity
- Name
- US Benefitsnorm: us benefits
Incident
- Discovered
- Nov 26, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified relevant state and federal regulators
Compliance
- Time to disclose
- 33 weeks(233 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.