Coalesce, LLC

Coalesce LLC dba BenefitElect notified Nebraska residents of a data breach involving unauthorized access to FTP systems via a Crush FTP vulnerability. Files containing names, addresses, DOBs, and SSNs were exfiltrated between March 30-31, 2025. BenefitElect discovered the activity on April 2, 2025, and notified 17 Nebraska residents on March 23, 2026. Response included forensic investigation, system hardening, and consumer guidance on credit monitoring.

Supplemental notice from Coalesce LLC dba BenefitElect to NH AG regarding unauthorized access to FTP systems via Crush FTP vulnerability. Files copied March 30-31, 2025. Incident discovered April 2, 2025. Data included names, SSNs, DOBs, addresses. 2 NH residents notified in this supplemental wave.

Coalesce, LLC dba BenefitElect notified Vermont AG of a data breach affecting 2 Vermont residents. Unauthorized access occurred March 30-31, 2025, via a Crush FTP vulnerability, resulting in exfiltration of names, DOBs, SSNs, and addresses. Discovered April 2, 2025. Notification sent March 23, 2026. No actual misuse reported.

Coalesce, LLC dba BenefitElect notified California residents of a data breach where unauthorized access and exfiltration of files occurred between March 30-31, 2025. The company detected suspicious activity on April 2, 2025. Affected data includes names, addresses, dates of birth, Social Security numbers, and benefits eligibility information. The company secured systems, engaged third-party specialists, and is offering credit monitoring.

Coalesce LLC dba Benefitelect reported a data breach to the Indiana Attorney General. The breach occurred on 2025-03-30 and was reported on 2026-03-23. 27 Indiana residents were affected. 29,023 individuals affected in total.

Coalesce, LLC dba Benefitelect based in Phoenix, Arizona, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-10-29 and reported on 2026-03-23. 4,054 Texas residents were affected. 29,023 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Medical Information;Health Insurance Information. Consumers were notified via Posted at company website or special website;U.S. Mail.

COALESCE, LLC DBA BENEFITELECT filed a data-breach notice with the Illinois Attorney General in March 2026 (case 26-03-1090). The register records the breach as discovered on October 29, 2025. Personal information types reported: ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Coalesce, LLC dba Benefitelect reported a data breach to the Oregon Attorney General. The breach was reported on 2025-12-24. The breach occurred during 3/30/2025 - 3/31/2025. The breach was discovered on 4/2/2025. 1,396 individuals were affected. Notice was sent on 12/24/2025.

Coalesce, LLC dba Benefitelect notified California residents of unauthorized access and exfiltration of files containing names, addresses, dates of birth, and Social Security numbers between March 30-31, 2025. Suspicious activity was detected on April 2, 2025. The company secured systems, engaged third-party specialists, and is offering credit monitoring.

Coalesce, LLC dba Benefitelect, an Arizona-based Business Associate, reported to HHS OCR on 2025-10-15 a Hacking/IT Incident affecting 501 individuals. Breached information was located on a Network Server. A business associate was present. No further detail is available in the public filing.

Coalesce, LLC dba BenefitElect notified Montana residents of a data breach where unauthorized access occurred March 30-31, 2025. Suspicious activity was detected April 2, 2025. Exfiltrated data included names, addresses, DOBs, and SSNs. Notification sent August 26, 2025.

Coalesce, LLC dba Benefitelect notified the NH AG of a data event where an unauthorized actor exploited a Crush FTP vulnerability to access and exfiltrate files containing names, addresses, DOBs, and SSNs between March 30-31, 2025. The company detected suspicious activity on April 2, 2025, and began notifying NH residents in October 2025.

Coalesce, LLC dba Benefitelect reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-10-15. 155 Massachusetts residents were affected.