HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
US Benefits
bd_6940d64facba0433 · schema v1 · pii pii-v1
Full breach record for US Benefits →Benefits Management Group, Inc. notified the NH AG of unauthorized access to computer systems between Oct 24 and Dec 2, 2024, discovered Nov 26, 2024. Files containing names, SSNs, driver's licenses, and financial account info were copied. 20 NH residents affected. BMGI notified law enforcement, HHS, and provided 12 months of Equifax credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_4a8ff93bae51d528Oregon State AGfiled 2025-07-17Candidate
- bd_5a9fdc1536a68548California State AGfiled 2025-07-17Verified
- bd_5dd79b9c22b6bdc7Montana State AGfiled 2025-07-17Verified by operator
- bd_92ba1ac53ee76546Texas State AGfiled 2025-07-18(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/benefits-management-group-20250717.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 17, 2025
- Raw hash
- 4fd6a79e0c3fa65ea0dd153e4d248ca81175677fcd9340006f20a4299444fb45
Reporting entity
- Name
- US Benefitsnorm: us benefits
Victim entity
- Name
- US Benefitsnorm: us benefits
Incident
- Discovered
- Nov 26, 2024
- Materiality determined
- —
- Notification sent
- Jan 24, 2025
- Affected individuals
- 20
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the U.S. Department of Health and Human Services (HHS)Notified federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 33 weeks(233 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.