Hartson-Kennedy Inc. notified the Maryland AG of a security incident discovered on October 9, 2024. An attacker accessed systems starting June 24, 2024, via a malicious ad (phishing), gaining access to employee and dependent data including PII, SSNs, and financial/health info. One Maryland resident was identified. The incident is contained; 24 months of credit monitoring is offered.