Blue & Co., LLC
ent_2a704ab367c2ba5e0e76b026
Disclosures
9
State AG · HHS OCR · 7 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
591,713
nationwide · HHS OCR IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Blue & Co., LLC
- Normalized
- blue— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (9)newest first
- Indiana State AGas victim2025-09-25
Blue & Co LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2025-06-16 and was reported on 2025-09-25. 1 Indiana residents were affected. 2 individuals affected in total.
- Montana State AGas victim2025-09-22
Blue & Co., LLC, a financial consulting firm, notified individuals of a data breach where an unauthorized actor copied data from a server. Unauthorized access occurred on November 7, 2024, and was discovered on December 9, 2024. Impacted data included names and government identifiers. Blue engaged forensic specialists, reported to law enforcement, and offered credit monitoring services.
- New Hampshire State AGas victim2025-09-22
Blue & Co., LLC notified the NH Attorney General of unauthorized access to a server on November 7, 2024, discovered December 9, 2024. Data copied included names and SSNs affecting 3 NH residents. Blue isolated the server, engaged forensic specialists, notified law enforcement, and provided one year of Kroll credit monitoring.
- Vermont State AGas victim2025-09-09
Blue & Co., LLC, a financial consulting firm, notified consumers of a data breach where an unauthorized actor accessed a server on November 7, 2024, and copied data. The company discovered the incident on December 9, 2024. Affected data includes names and potentially other personal information. The company isolated the server, engaged forensic specialists, and is offering credit monitoring services.
- Nebraska State AGas victim2025-09-04
Blue & Co., LLC, a financial consulting firm, notified the Nebraska Attorney General of a data breach affecting 17 Nebraska residents. Unauthorized access occurred on November 7, 2024, resulting in the copying of names and Social Security numbers. Blue discovered the incident on December 9, 2024, isolated the server, and engaged forensic specialists. Notices were sent to affected individuals starting September 4, 2025, offering 12 months of credit monitoring via Kroll.
- Illinois State AGas victim2025-09-01
BLUE & CO., LLC filed a data-breach notice with the Illinois Attorney General in September 2025 (case 25-09-479). The register records the breach as discovered on August 14, 2025. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Indiana State AGas victim2025-07-08
Blue & Co LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2024-11-07 and was reported on 2025-07-08. 7,988 Indiana residents were affected.
- Massachusetts State AGas victim2025-07-08
Blue & Co., LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-07-08. 23 Massachusetts residents were affected.
- INDIANAHHS OCRas victim2025-02-07
Blue & Co., LLC reported to HHS on 2025-02-07 a Hacking/IT Incident affecting 591713 individuals. Breached information located on Network Server.