Horizon Actuarial Services, LLC suffered an unauthorized access incident on November 10–11, 2021, in which an external group exfiltrated personal data from two company servers. The group notified Horizon on November 12, 2021 via email demanding payment. Horizon negotiated and paid the group, notified the FBI, and engaged third-party specialists. Affected data included PII of benefit plan participants. Notifications to affected individuals began January 13, 2022.