CBIZ Benefits & Insurance Services, Inc.

Diversified Benefit Services Insurance Marketing, Inc. reported that an unauthorized actor gained access to its email system on August 7, 2025, potentially downloading emails and files containing names, Social Security Numbers, and health insurance information. The company secured the environment, engaged forensic experts, and is offering credit monitoring and fraud assistance to affected individuals.

CBIZ BENEFITS & INSURANCE SERVICES, INC. filed a data-breach notice with the Illinois Attorney General in September 2024 (case 24-09-070). The register records the breach as discovered on June 2, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

CBIZ Benefits & Insurance Services Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-08-28. 382 Massachusetts residents were affected.

CBIZ Benefits & Insurance Services, Inc. reported a data breach affecting 7 Maine residents. Unauthorized access occurred between June 2 and June 21, 2024, via exploitation of a web page vulnerability. The incident exposed names and Social Security numbers of individuals associated with CBIZ clients. CBIZ engaged cybersecurity professionals, fixed the vulnerability, and provided two years of credit monitoring.

CBIZ Benefits & Insurance Services, Inc. (OH), a business associate, reported to HHS on 2024-08-28 a Hacking/IT Incident affecting 9,602 individuals. PHI involved included names, Social Security numbers, and dates of birth, located on a Network Server. The BA notified HHS and affected individuals, provided substitute notice, offered complimentary credit monitoring, and implemented additional administrative, technical, and security safeguards.

CBIZ Benefits & Insurance Services Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-06-02 and was reported on 2024-08-28. 40 Indiana residents were affected. 7,006 individuals affected in total.

CBIZ Benefits & Insurance Services, Inc. notified the NH Attorney General of a security incident where an unauthorized party exploited a web page vulnerability to access databases containing retiree health and welfare plan information (including PII and PHI) for NH residents between June 2-21, 2024. CBIZ detected the incident on June 24, 2024, engaged cybersecurity professionals, fixed the vulnerability, and is offering credit monitoring via Kroll.

CBIZ Benefits & Insurance Services, Inc. notified consumers of a data breach where an unauthorized party exploited a web page vulnerability to access databases between June 2 and June 21, 2024. The incident involved PII and government IDs. CBIZ engaged forensic investigators, fixed the vulnerability, and provided two years of free identity monitoring via Kroll.

CBIZ Benefits & Insurance Services, Inc. notified Montana residents of a data incident where an unauthorized party exploited a web page vulnerability to access databases between June 2 and June 21, 2024. CBIZ discovered the incident on June 24, 2024, engaged forensic professionals, fixed the vulnerability, and is cooperating with the FBI. Affected individuals are offered two years of Kroll identity monitoring.

CBIZ BENEFITS & INSURANCE SERVICES, INC. filed a data-breach notice with the Illinois Attorney General in August 2024 (case 24-08-056). The register records the breach as discovered on June 2, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.