Custom Benefit Programs, Inc.
bd_b1d7bcd36b1fecc7 · schema v1 · pii pii-v1
Full breach record for Custom Benefit Programs, Inc. →Aon Corporation, via subsidiary Custom Benefit Programs, Inc., disclosed that a former employee on December 17, 2020, improperly shared a file containing Thomson Reuters employee benefit data (names, addresses, SSNs, compensation) to an unauthorized third party. Aon discovered the incident on April 7, 2021, terminated the employee, and resolved the matter. Approximately 11,731 U.S. employees were affected. Aon provided 12 months of free credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 17, 2020
Begins
Apr 7, 2021
Discovered
May 21, 2021
Filed
vs. sector median
11 wks faster
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Massachusetts State AGbd_1ee7dbdf471086172021-05-21Verified
- California State AGbd_2863a3cdb89a289c2021-05-21Candidate
- Indiana State AGbd_337e135fe22f35022021-05-21Verified
- Maine State AGbd_62163a93ba4b6a912021-05-21Verified
Show 1 more filing ↓Show fewer ↑up to 2d gap
- Maine State AGbd_2c8c6cbe418fb9782021-05-19 · +2dCandidate
Filing propagation · 6 filings · 5 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.