HackingCustomer Data InvolvedDelayed DiscoveryPIIFINANCIAL_ACCOUNTLowResolved
Clarity Benefit Solutions
bd_5f7ba03562a42d9f · schema v1 · pii pii-v1
Full breach record for Clarity Benefit Solutions →On August 27, 2025, Clarity Benefit Solutions identified suspicious activity within its benefits platform. An unauthorized party accessed a small number of accounts. Investigation confirmed the breach on September 18, 2025 and a detailed review was completed September 23, 2025. Potentially exposed data included names and HSA Account numbers. One Maine resident was affected (total 64 individuals). Notifications sent October 24, 2025. Identity monitoring offered via Cyberscout/TransUnion.
Maine clockDiscovered Sep 23, 2025 → Filed with AG Oct 24, 202531d ⏱ ME AG >30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1bb3530b-e530-4cdf-8b95-2cc8939050e4.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 24, 2025
- Raw hash
- 45db9668571bdb25db7cac59acfa29dfc610da17874488f43d52e9d5707b2456
Reporting entity
- Name
- Clarity Benefit Solutionsnorm: clarity benefit
- Industry
- Other Commercial
Victim entity
- Name
- Clarity Benefit Solutionsnorm: clarity benefit
- Industry
- Other Commercial
Incident
- Discovered
- Sep 23, 2025
- Materiality determined
- —
- Notification sent
- Oct 24, 2025
- Affected individuals
- 1
- Data types
- PIIFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Maine Attorney General
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- ME AG >30d · 31d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 23, 2025→ Filed with AG: Oct 24, 202531d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.