NationsBenefits Holdings, LLC
ent_bfb6c3f3a07bd4221d12b41e
Disclosures
7
State AG · 7 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
19,386
as filed · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- NationsBenefits Holdings, LLC
- Normalized
- nationsbenefits holdings— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (7)newest first
- 🦞Maine State AGas victim2023-05-05
NationsBenefits Holdings, LLC, a healthcare entity based in Florida, reported an external system breach (hacking) occurring between January 30, 2023, and February 7, 2023. The breach was discovered on February 13, 2023. The incident affected 19,386 Maine residents, with the total number of affected individuals listed as TBD. The data acquired included names and Social Security Numbers. The entity notified consumer reporting agencies and sent written notifications to affected individuals, offering 24 months of Experian IdentityWorks.
- 🦫Oregon State AGas victim2023-05-01
NationsBenefits Holdings, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-01. The breach occurred during 1/30/2023. The breach was discovered on 2/7/2023. Notice was sent on 4/13/2023.
- 🐻California State AGas victim2023-04-14
NationsBenefits Holdings, LLC notified California residents that a third-party vendor, Fortra, LLC, experienced a cybersecurity incident on or around January 30, 2023. NationsBenefits learned of the incident on February 7, 2023. The attack involved unauthorized access to data exchanged via Fortra's software. NationsBenefits stopped using the software, engaged forensic investigators, and notified law enforcement. Affected individuals were offered 24 months of identity monitoring.
- 🍁Vermont State AGas victim2023-04-13
NationsBenefits Holding, LLC notified consumers of a data breach involving a third-party vendor, Fortra, LLC. The incident occurred around January 30, 2023, and was discovered on February 7, 2023. Personal information of beneficiaries was accessed. NationsBenefits engaged legal counsel and cybersecurity firms, notified law enforcement, and offered 24 months of credit monitoring via Experian IdentityWorks.
- 🦬Montana State AGas victim2023-04-13
NationsBenefits Holdings, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2023-04-13. The breach occurred on 1/30/2023. 161 Montana residents were affected.
- ⛰️New Hampshire State AGas victim2023-04-13
NationsBenefits Holdings, LLC reported a security incident resulting from a zero-day vulnerability (CVE-2023-0669) in Fortra's GoAnywhere MFT software. The incident occurred on Jan 30, 2023, and was discovered on Feb 7, 2023. Personal and health information of approximately 7,030 New Hampshire residents was impacted. NationsBenefits took the server offline, engaged forensic investigators, notified the FBI, and provided 24 months of credit monitoring to affected individuals.
- 💎Delaware State AGas victim2023-04-13
NationsBenefits Holding, LLC, a benefits administration provider, disclosed a cybersecurity incident involving its third-party file exchange vendor, Fortra, LLC. The attack occurred on or around January 30, 2023, and NationsBenefits discovered the incident on February 7, 2023. The breach potentially exposed personal information of individuals covered by health plan clients. NationsBenefits engaged legal counsel and cybersecurity firms, notified law enforcement, and offered 24 months of credit monitoring via Experian.