Confirmed breach. Intrusion Nov 10, 2021–Nov 17, 2021, discovered Nov 12, 2021 — the first regulatory filing landed 117 days later (flagged late). 2,824,259 individuals reported across the linked filings.
Regulatory clocksMaine✗ ME AG >90d · 92dCalifornia✗ CA 60-day late · 62dWashington✗ WA AG >90dHIPAA✓ HHS notifiedFull clock table in Litigation Timeline
HHS OCRState AGConfirmedLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedhigh sensitivity
Affected (total reported)
76days
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
2,824,259
Data types
6
PHI · PII · Identity (basic)
Jurisdictions
7
CA FEDERAL ID ME MT OR WA
Linked filings
20
HHS OCR · State AG
Sensitive data
identity_government
Affected residents by state
per-filing reported counts
ME2,302,441
ME194,195
OR194,195
WA53,256
MT19,245
ID6,645
ID6,413
ME6,323
ME2,011
ME1,924
ME1,923
ME1,882
ME26
ME15
ME15
ID7
State AGs report only their own residents; bars show per-filing counts.
Timeline
Earliest sighting first · deep chronology in Litigation Timeline
20 filings across 7 jurisdictions · Mar 9, 2022 – May 24, 2022 · 3 milestones
Breach window
Nov 12, 2021
When the intrusion reportedly occurred, per the linked filings
Breach discoveredletter-grounded
Nov 12, 2021
Reported by CALIFORNIA AG, IDAHO AG, WASHINGTON AG filings
Horizon Actuarial Services, LLC, a business associate based in Georgia, reported a ransomware attack that compromised the protected health information of 227,953 individuals. PHI involved included names, dates of birth, Social Security numbers, claims and financial information, and diagnoses. The BA notified HHS, affected individuals, and the media; posted substitute notice on its website; offered complimentary credit monitoring; and implemented additional administrative and technical safeguards.
Most recent
19 State AG filingsMar 9, 2022 – May 24, 2022ExpandCollapse
CAMEORMTIDWA
California State AG
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Horizon Actuarial Services, LLC experienced unauthorized access to two computer servers on November 10-11, 2021. The company discovered the incident on November 12, 2021, after receiving an email from a group claiming to have stolen personal data. The group demanded payment, which Horizon Actuarial paid in exchange for an agreement to delete the data. The investigation confirmed that personal information, including names, addresses, and potentially Social Security numbers and financial account details, was accessed. The company notified the FBI, secured its servers, and offered 12 months of identity monitoring to affected individuals. Notices began mailing on January 13, 2022.
CA 60-day late · 62d
🦞Maine State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC, a vendor for the Major League Baseball Players Benefit Plan, experienced an external system breach on November 12, 2021, which was discovered on December 29, 2021. The incident affected 15 Maine residents, compromising their names and Social Security Numbers. The company provided written notification to affected individuals on March 16, 2022 and offered one year of identity theft protection services through Kroll.
Affected (this filing): 15
ME AG >30d · 70dME resident >60d · 77d
🦞Maine State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC, a vendor for the New York Teamsters Conference Pension and Retirement Fund, experienced a data breach on November 12, 2021, which was discovered on January 13, 2022. The incident, described as an external system breach or hacking, affected 26 Maine residents. The compromised data included names and Social Security Numbers. In response, the company offered one year of credit monitoring and identity theft protection services through Kroll.
Affected (this filing): 26
ME AG >30d · 68dME resident >60d · 68d
🦞Maine State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC reported a data breach affecting 15 Maine residents. The breach, which occurred on November 12, 2021, and was discovered on January 12, 2022, was an external system breach or hacking incident. The compromised data included names and Social Security numbers. The company began notifying affected individuals on March 22, 2022, and offered one year of credit monitoring and identity restoration services through Kroll.
Affected (this filing): 15
ME AG >30d · 69dME resident >60d · 69d
🦞Maine State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC reported an external system breach (hacking) occurring between November 10 and 17, 2021, discovered on January 13, 2022. The incident compromised the names and Social Security Numbers of 194,195 individuals, including 102 Maine residents. The company notified affected individuals in writing on March 22, 2022, and provided 12 months of identity theft protection services through Kroll, LLC.
Affected (this filing): 194,195
ME AG >30d · 68dME resident >60d · 68d
🦫Oregon State AGlinked via same-victim cross-source · 100%
Horizon Actuarial Services, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2022-03-22. 194,195 individuals were affected.
Affected (this filing): 194,195
🦬Montana State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services LLC reported a data breach to the Montana Attorney General. The breach was reported on 2022-03-22. The breach occurred from 11/10/2021 to 11/11/2021. 19,245 Montana residents were affected.
Affected (this filing): 19,245
🦞Maine State AGlinked via same-victim cross-source · 100%
Horizon Actuarial Services, LLC, a financial services firm, experienced an external system breach on November 12, 2021, which was discovered on January 13, 2022. The incident compromised the names and Social Security numbers of 6,323 individuals. The company began notifying affected individuals on March 22, 2022, and offered one year of identity theft protection services through Kroll.
Affected (this filing): 6,323
ME AG >30d · 68dME resident >60d · 68d
🐻California State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC reported a data breach occurring November 10-11, 2021, where unauthorized actors accessed computer servers and exfiltrated personal data. The company negotiated with and paid the attackers to delete the data. Affected individuals received notification letters offering 12 months of identity monitoring services provided by Kroll. The FBI was notified.
CA 60-day late · 62d
🥔Idaho State AGlinked via same-victim cross-source · 100%
Horizon Actuarial Services, LLC reported a data event affecting 7 Idaho residents. Unauthorized access occurred Nov 10-11, 2021, via phishing email leading to server compromise. Stolen data included names, SSNs, DOBs, and addresses. The company paid a ransom to the threat actor, who agreed to delete the data. Affected individuals received 12 months of credit monitoring via Kroll.
Affected (this filing): 7
🌲Washington State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC, a business sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2021-11-12 and filed notice on 2022-03-22. 53,256 Washington residents were affected. 130 days elapsed between awareness and notification. 2 days to identify the breach. 5 days to contain the breach.
Affected (this filing): 53,256
WA AG >90d
🐻California State AGlinked via same-victim cross-source · 95%
On November 10-11, 2021, two servers of Horizon Actuarial Services, LLC were accessed without authorization. On November 12, 2021, Horizon Actuarial received an extortion email claiming data theft. The company engaged third-party specialists, notified the FBI, and paid the threat actor. Affected individuals were benefit plan participants; PII was potentially exposed. Identity monitoring via Kroll was offered.
Horizon Actuarial Services, LLC reported an unauthorized access to its computer servers on November 10-11, 2021. The incident involved ransomware that encrypted data and resulted in the exfiltration of personal information, including names, SSNs, bank account numbers, and health insurance plan details. The company paid a ransom to the threat actor in exchange for a promise to delete the data. Notification was sent to approximately 6,413 Idaho residents, offering 12 months of identity monitoring services.
Affected (this filing): 6,413
🦞Maine State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC, a professional services firm, reported a data breach to the Maine Attorney General, indicating that an external hacking event occurred between November 10 and November 17, 2021. The breach was discovered on January 13, 2022. The compromised information includes names and Social Security numbers. A total of 1,882 Maine residents were affected. The company provided written notification to the affected individuals on April 11, 2022, and offered 12 months of identity theft protection services through Kroll, LLC.
Affected (this filing): 1,882
ME AG >30d · 88dME resident >60d · 88d
🥔Idaho State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC reported a data breach affecting 6,645 Idaho residents. Unauthorized access occurred on Nov 10-11, 2021, via stolen credentials or exploited vulnerabilities. Stolen data included names, SSNs, DOBs, and bank account numbers. The company paid a ransom to the threat actor, notified the FBI, and provided 12 months of Kroll identity monitoring to affected individuals.
Affected (this filing): 6,645
🦞Maine State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred between November 10, 2021, and November 17, 2021. The breach was discovered on January 13, 2022. The compromised information includes names and Social Security Numbers. A total of 1,923 Maine residents were affected. The company began notifying affected individuals on April 18, 2022, and offered 12 months of identity theft protection services through Kroll, LLC.
Affected (this filing): 1,923
ME AG >90d · 92dME resident >60d · 95d
🦞Maine State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC reported a data breach affecting 1,924 Maine residents. The incident, an external system breach (hacking), occurred between November 10, 2021, and November 17, 2021, and was discovered on January 13, 2022. The compromised information includes names and Social Security Numbers. Affected individuals were notified on April 26, 2022, and offered 12 months of identity theft protection services through Kroll, LLC.
Affected (this filing): 1,924
ME AG >90d · 103dME resident >60d · 103d
🦞Maine State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC experienced an external system breach, or hacking incident, between November 10, 2021, and November 17, 2021. The breach was discovered on January 13, 2022. The compromised information included names and Social Security Numbers, affecting 2,011 Maine residents. The company provided written notification to affected individuals on May 10, 2022, and offered 12 months of identity theft protection services through Kroll, LLC.
Affected (this filing): 2,011
ME AG >90d · 117dME resident >60d · 117d
🦞Maine State AGlinked via same-victim cross-source · 95%
Horizon Actuarial Services, LLC reported an external system breach (hacking) occurring between November 10 and 17, 2021, discovered on January 13, 2022. The incident compromised names and Social Security Numbers of approximately 2.3 million individuals, including 3,309 Maine residents. The company provided written notification and offered 12 months of identity theft protection services via Kroll, LLC.