Clustered 6 filings across 4 jurisdictions · filing window Jun 13, 2025 → Jul 21, 2025. View entity profile → Other incidents for this victim →
incident inc_6f1dc714e27d4edf · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA GA NH WA
HHS OCR · State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Dec 16, 2024
When the intrusion reportedly occurred, per the linked filings
Dec 17, 2024
Reported by CALIFORNIA AG, WASHINGTON AG, NEW HAMPSHIRE AG filings
Decisely Insurance Services, LLC reported to HHS on 2025-06-13 a Hacking/IT Incident affecting 537603 individuals. Breached information located on Network Server, Other. Business Associate present: Yes.
Affected (this filing): 537,603
Decisely Insurance Services, LLC reported a supplemental data security incident affecting approximately 1,504 New Hampshire residents. Suspicious activity on Decisely's cloud storage platform was detected on December 17, 2024, with data acquisition occurring around December 16, 2024. Compromised data included names, DOBs, SSNs, passport numbers, and bank account details. Decisely engaged forensic experts, notified the FBI, and provided credit monitoring via Kroll.
Affected (this filing): 1,504
Decisely Insurance Services, LLC notified the California AG of a data security incident. On December 17, 2024, the company discovered suspicious activity related to its cloud storage platform. Investigation determined that data may have been acquired on December 16, 2024. The incident involved personal information including names and other data elements. Decisely engaged cybersecurity experts, secured the environment, reported to law enforcement, and is providing identity monitoring services through Kroll. No evidence of fraudulent misuse was found.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Decisely Insurance Services, LLC notified individuals that their personal information may have been involved in a data security incident. The company discovered suspicious activity related to its cloud storage platform on December 17, 2024. Investigation determined that data may have been acquired on December 16, 2024. The information involved includes names and other personal data. Decisely engaged cybersecurity experts, secured the environment, reported to law enforcement, and is providing identity monitoring services through Kroll.
Decisely Insurance Services, LLC, a business sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2024-12-17 and filed notice on 2025-06-14. 8,065 Washington residents were affected. 179 days elapsed between awareness and notification. 2 days to identify the breach. 0 days to contain the breach.
Affected (this filing): 8,065
Decisely Insurance Services, LLC reported a data security incident affecting approximately 75 New Hampshire residents. The incident involved unauthorized access to Decisely's cloud storage platform, beginning December 16, 2024, with suspicious activity detected on December 17, 2024. Compromised data included SSNs, DOBs, and financial account numbers. Decisely engaged forensic experts, notified the FBI, and sent notifications on June 13, 2025, offering credit monitoring.
Affected (this filing): 75