KELLY & ASSOCIATES INSURANCE GROUP, INC.

13 filings across 8 jurisdictions · Apr 9, 2025 – Jul 1, 2025 · 4 milestones

1. Breach window

   Dec 12, 2024 → Dec 17, 2024

   When the intrusion reportedly occurred, per the linked filings

2. Breach discoveredAG web form

   Dec 12, 2024

   Reported by WASHINGTON AG filing

3. Breach discoveredconflicts with Dec 12, 2024

   Dec 17, 2024

   Reported by SOUTH CAROLINA AG filing

4. 76 days
   Breach discoveredconflicts with Dec 12, 2024AG web form

   Mar 3, 2025

   Reported by MAINE AG, HHS OCR, OREGON AG, TEXAS AG filings

5. 37 days
   🦞Maine State AGFirst filinglinked via same-victim cross-source · 100%

   Filed Apr 9, 2025bd_2de86b9e45551f97

   Kelly & Associates Insurance Group, Inc. (Kelly Benefits), a benefits enrollment services provider based in Sparks, MD, experienced an unauthorized external intrusion between December 12–17, 2024, in which certain files were copied and exfiltrated. The review was completed March 3, 2025. Nine Maine residents were affected (32,234 total). Exposed data includes names and Social Security numbers. The FBI was notified. Affected individuals were offered 12 months of IDX credit monitoring.

   Affected (this filing):

6. 🐻California State AGlinked via same-victim cross-source · 95%

   Filed Apr 9, 2025bd_5acce33fec71ebdd

   Kelly & Associates Insurance Group, Inc. (Kelly Benefits), a benefit enrollment services company, experienced unauthorized access to its environment between December 12–17, 2024. Certain files were copied and taken. A review completed on March 3, 2025 identified affected individuals. Kelly Benefits reported the incident to the FBI and is offering credit monitoring through IDX.

7. 🦀MARYLANDHHS OCRlinked via tight-window match · 100%

   Filed Apr 9, 2025bd_aea5db52728bbd07

   Kelly & Associates Insurance Group, Inc. (MD), a Business Associate, reported to HHS OCR on 2025-04-09 a Hacking/IT Incident affecting 553,332 individuals. Breached information was located on a Network Server. A business associate was present. No further details were provided in the public web description.

   Affected (this filing): 553,332

   HHS notified
8. 8 State AG filingsApr 10, 2025 – May 30, 2025ExpandCollapse

   SCMEWACAORIA

   🌴South Carolina State AGlinked via same-victim cross-source · 95%
9. 31 days
   🦞Maine State AGlinked via same-victim cross-source · 95%

   Filed Jun 30, 2025bd_021fda7188de0ef4

   Kelly Benefits (benefit enrollment services) suffered an external system breach Dec 12-17, 2024; files containing names and SSNs were copied. Discovery completed Mar 3, 2025 via forensic review. 18,855 Maine residents affected (553,660 total). Incident reported to FBI. 12-month IDX credit monitoring offered. Downstream clients include Enterprise Community Partners, Smartlink, and VSP Vision Care.

   Affected (this filing): 18,855
10. ⭐Texas State AGMost recentlinked via same-victim cross-source · 95%

    Filed Jul 1, 2025bd_abfe5cf4f4535a82

    Kelly & Associates Insurance Group, Inc. based in Sparks, Maryland, a insurance services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-03-03 and reported on 2025-07-01. 17,775 Texas residents were affected. 553,660 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail.

    Affected (this filing): 17,775