HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedMulti-Stage ChainPIIIDENTITY_BASICLowContained
Express Scripts, Inc.
bd_ad7203999f9b496c · schema v1 · pii pii-v1
Full breach record for Express Scripts, Inc. →Berkeley Research Group (BRG), a third-party vendor for Express Scripts, experienced a data breach from Feb 28 to Mar 2, 2025. An unauthorized actor accessed BRG systems and copied personal information of Express Scripts clients. BRG contained the incident, rotated credentials, and rebuilt systems. Affected individuals received 24 months of credit monitoring via Kroll. Federal law enforcement was notified.
Massachusetts clock✗ MA AG >90d14 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-697-massachusetts-mutual-life-insurance-company/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- 583f13a73867ba7820a7214ee6cf30fb4ff059ee6b7f264a454dc4b35446dbc8
Reporting entity
- Name
- Berkeley Research Group, LLC - Preliminary Filingnorm: berkeley research group llc preliminary filing
- Industry
- professional_services
Victim entity
- Name
- Express Scripts, Inc.norm: express scripts
- Domain
- express-scripts.com
- Industry
- healthcare
Incident
- Discovered
- Mar 2, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- cooperating with federal law enforcementreporting this matter to additional authorities
- Third party
- via Berkeley Research Group, LLCvendor
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 months(425 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.