NationsBenefits Holdings, LLC

NationsBenefits Holdings, LLC, a healthcare entity based in Florida, reported an external system breach (hacking) occurring between January 30, 2023, and February 7, 2023. The breach was discovered on February 13, 2023. The incident affected 19,386 Maine residents, with the total number of affected individuals listed as TBD. The data acquired included names and Social Security Numbers. The entity notified consumer reporting agencies and sent written notifications to affected individuals, offering 24 months of Experian IdentityWorks.

NationsBenefits Holdings, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-01. The breach occurred during 1/30/2023. The breach was discovered on 2/7/2023. Notice was sent on 4/13/2023.

NationsBenefits Holdings, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-04-20. 1,339 Massachusetts residents were affected. The report records the breach type as electronic.

NationsBenefits Holdings, LLC notified California residents that a third-party vendor, Fortra, LLC, experienced a cybersecurity incident on or around January 30, 2023. NationsBenefits learned of the incident on February 7, 2023. The attack involved unauthorized access to data exchanged via Fortra's software. NationsBenefits stopped using the software, engaged forensic investigators, and notified law enforcement. Affected individuals were offered 24 months of identity monitoring.

NationsBenefits Holding, LLC notified consumers of a data breach involving a third-party vendor, Fortra, LLC. The incident occurred around January 30, 2023, and was discovered on February 7, 2023. Personal information of beneficiaries was accessed. NationsBenefits engaged legal counsel and cybersecurity firms, notified law enforcement, and offered 24 months of credit monitoring via Experian IdentityWorks.

NationsBenefits Holdings, LLC notified Montana residents that a third-party vendor, Fortra, LLC, experienced a cybersecurity attack on or around January 30, 2023. NationsBenefits discovered the incident on February 7, 2023, and confirmed that some individuals' personal information was affected. The company engaged legal counsel and cybersecurity firms, notified law enforcement, and offered 24 months of Experian IdentityWorks services.

NationsBenefits Holdings, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-01-30 and was reported on 2023-04-13. 78,256 Indiana residents were affected. 3,099,502 individuals affected in total.

NationsBenefits Holdings, LLC reported a security incident resulting from a zero-day vulnerability (CVE-2023-0669) in Fortra's GoAnywhere MFT software. The incident occurred on Jan 30, 2023, and was discovered on Feb 7, 2023. Personal and health information of approximately 7,030 New Hampshire residents was impacted. NationsBenefits took the server offline, engaged forensic investigators, notified the FBI, and provided 24 months of credit monitoring to affected individuals.

NationsBenefits Holding, LLC, a benefits administration provider, disclosed a cybersecurity incident involving its third-party file exchange vendor, Fortra, LLC. The attack occurred on or around January 30, 2023, and NationsBenefits discovered the incident on February 7, 2023. The breach potentially exposed personal information of individuals covered by health plan clients. NationsBenefits engaged legal counsel and cybersecurity firms, notified law enforcement, and offered 24 months of credit monitoring via Experian.

NationsBenefits Holdings, LLC reported to HHS on 2023-04-13 a Hacking/IT Incident affecting 3,099,502 individuals. Breached information located on Network Server. A software application used by its business associate exposed PHI including names, DOB, addresses, SSNs, diagnoses, and financial data. CE provided credit monitoring and implemented additional safeguards.

NationsBenefits Holdings, LLC notified South Carolina residents of a third-party vendor breach involving Fortra, LLC. The incident occurred around Jan 30, 2023, and was discovered on Feb 7, 2023. Personal information of beneficiaries was accessed. NationsBenefits engaged legal and cybersecurity firms, notified law enforcement, and offered 24 months of credit monitoring.

NATIONSBENEFITS HOLDINGS filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-287). The register records the breach as discovered on January 30, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.