Clustered 7 filings across 7 jurisdictions · filing window Apr 13, 2023 → May 5, 2023. View entity profile → Other incidents for this victim →
incident inc_498a29d167c945f1 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
CA DE ME MT NH OR VT
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Jan 30, 2023
When the intrusion reportedly occurred, per the linked filings
Feb 7, 2023
Reported by NEW HAMPSHIRE AG, VERMONT AG, DELAWARE AG, CALIFORNIA AG, OREGON AG filings
Feb 13, 2023
Reported by MAINE AG filing
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
NationsBenefits Holding, LLC notified consumers of a data breach involving a third-party vendor, Fortra, LLC. The incident occurred around January 30, 2023, and was discovered on February 7, 2023. Personal information of beneficiaries was accessed. NationsBenefits engaged legal counsel and cybersecurity firms, notified law enforcement, and offered 24 months of credit monitoring via Experian IdentityWorks.
NationsBenefits Holdings, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2023-04-13. The breach occurred on 1/30/2023. 161 Montana residents were affected.
Affected (this filing): 161
NationsBenefits Holdings, LLC reported a security incident resulting from a zero-day vulnerability (CVE-2023-0669) in Fortra's GoAnywhere MFT software. The incident occurred on Jan 30, 2023, and was discovered on Feb 7, 2023. Personal and health information of approximately 7,030 New Hampshire residents was impacted. NationsBenefits took the server offline, engaged forensic investigators, notified the FBI, and provided 24 months of credit monitoring to affected individuals.
Affected (this filing): 7,030
NationsBenefits Holding, LLC, a benefits administration provider, disclosed a cybersecurity incident involving its third-party file exchange vendor, Fortra, LLC. The attack occurred on or around January 30, 2023, and NationsBenefits discovered the incident on February 7, 2023. The breach potentially exposed personal information of individuals covered by health plan clients. NationsBenefits engaged legal counsel and cybersecurity firms, notified law enforcement, and offered 24 months of credit monitoring via Experian.
NationsBenefits Holdings, LLC notified California residents that a third-party vendor, Fortra, LLC, experienced a cybersecurity incident on or around January 30, 2023. NationsBenefits learned of the incident on February 7, 2023. The attack involved unauthorized access to data exchanged via Fortra's software. NationsBenefits stopped using the software, engaged forensic investigators, and notified law enforcement. Affected individuals were offered 24 months of identity monitoring.
NationsBenefits Holdings, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-01. The breach occurred during 1/30/2023. The breach was discovered on 2/7/2023. Notice was sent on 4/13/2023.
NationsBenefits Holdings, LLC, a healthcare entity based in Florida, reported an external system breach (hacking) occurring between January 30, 2023, and February 7, 2023. The breach was discovered on February 13, 2023. The incident affected 19,386 Maine residents, with the total number of affected individuals listed as TBD. The data acquired included names and Social Security Numbers. The entity notified consumer reporting agencies and sent written notifications to affected individuals, offering 24 months of Experian IdentityWorks.
Affected (this filing): 19,386