CBIZ Benefits & Insurance Services, Inc.
bd_61274703901e5b08 · schema v1 · pii pii-v1
Full breach record for CBIZ Benefits & Insurance Services, Inc. →2 incidents on fileCBIZ Benefits & Insurance Services, Inc. notified the NH Attorney General of a security incident where an unauthorized party exploited a web page vulnerability to access databases containing retiree health and welfare plan information (including PII and PHI) for NH residents between June 2-21, 2024. CBIZ detected the incident on June 24, 2024, engaged cybersecurity professionals, fixed the vulnerability, and is offering credit monitoring via Kroll.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 2, 2024
Begins
Jun 24, 2024
Discovered
Aug 28, 2024
Filed
vs. sector median
3 wks faster
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- Massachusetts State AGbd_018e1a8162f4bc1e2024-08-28Verified
- Maine State AGbd_283e90cfc9d786e82024-08-28Verified
- HHS OCRbd_4390450bb6cd260d2024-08-28Verified
- Indiana State AGbd_5a40f16ebc5d4f592024-08-28Verified
Show 4 more filings ↓Show fewer ↑up to 27d gap
- Vermont State AGbd_cd16c942d4634e0a2024-08-28Verified
- Montana State AGbd_ce0aa1b8f498185e2024-08-28Verified
- Illinois State AGbd_a2160308b3893b392024-09-01 · +4dVerified
- Illinois State AGbd_f4a16075c21cb7922024-08-01 · +27dVerified
Filing propagation · 9 filings · 8 states
View merged incident ↗Pattern: first filing Aug 1 (IL), last Sep 1 (IL) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.