HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
Kelly Insurance & Investments, Inc
bd_5c1c5a90aeca8273 · schema v1 · pii pii-v1
Full breach record for Kelly Insurance & Investments, Inc →Kelly Insurance & Investments, Inc. notified consumers of a March 1, 2023 cybersecurity incident involving unauthorized access to its systems. Files containing names and addresses were taken. The company secured its network, enhanced security protocols, and provided 12 months of complimentary identity monitoring through IDX. The notice was filed with the Vermont Attorney General on November 2, 2023.
Vermont clock✗ VT AG >45 bday35 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_a74bc2f91e1d841fMaine State AGfiled 2023-11-03(1d gap)Candidate
- bd_afa5bd42d9f6f748Montana State AGfiled 2023-11-03(1d gap)Verified
- bd_e0b9a1bb70443164New Hampshire State AGfiled 2023-11-03(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-11-02-kelly-insurance-investments-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 2, 2023
- Raw hash
- c41095a0e68a650227c685356adc93352ad8977642bc1fd0b158908969563e4e
Reporting entity
- Name
- Kelly Insurance & Investments, Incnorm: kelly insurance investments
Victim entity
- Name
- Kelly Insurance & Investments, Incnorm: kelly insurance investments
Incident
- Discovered
- Mar 1, 2023
- Materiality determined
- Nov 2, 2023
- Notification sent
- Nov 2, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 35 weeks(246 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.