DisclosureLens
HHS OCRState AGConfirmed30 filings · 14 statesLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedhigh sensitivity
Merged incident · 30 filings

KELLY & ASSOCIATES INSURANCE GROUP, INC. — December 2024 breach

Clustered 30 filings across 14 jurisdictions · filing window Apr 9, 2025 Jul 1, 2025. View entity profile → Other incidents for this victim →

Determination

Confirmed

Members

30 filings

States

14

Affected · reported

553,660

First → last filing

Apr 9, 2025 Jul 1, 2025

Merge confidence

100%

incident inc_e45b6d38d7f342c3 · merged by deterministic · confidence 100%

Confirmed breach. Merged as one breach: 30 regulatory filings. The filings describe unauthorized access. Intrusion Dec 12, 2024–Dec 17, 2024, discovered Dec 12, 2024 — the first regulatory filing landed 118 days later (flagged late). 553,660 individuals reported across the linked filings. Data reported: Government ID, Health (basic), Identity (basic), and 3 more. Notifications rolled out on a 83-day schedule across 30 filings beginning Apr 9, 2025. Each member filing remains the legal record for its jurisdiction.

Litigation Timing

Supplemental
Notification delay
118days

Discovered → first regulatory filing

Discovery variance
81days

Range of discovered_at dates across filings

Filing span
83days

Time between earliest and latest filing

Not recorded for this incident

Leak precedence · Materiality delta · SEC filing delayno leak-site claim in this cluster; no SEC 8-K in this cluster.

Regulatory clocksMaine ME AG >90d · 119dOregon OR AG >45dIowa IA AG >5 bdayWashington WA AG >90dTexas TX AG >30dHIPAA HHS report on timeMassachusetts MA credit monitoring dueSouth Carolina SC CRA notice dueFull clock table in Litigation Timeline

The weekly clock on records like this one

The Disclosure Clock is a weekly briefing on what landed in the disclosure record, and the gap between the criminals' post and the regulator's filing — measured on the whole record, with the method shown.

Weekly. Double opt-in, one-click unsubscribe, and the address goes nowhere else.

Kelly & Associates Insurance Group, Inc. data breach (2025) · DisclosureLens