Benefits Partner
Disclosed Apr 7, 20251 year ago40,177 affectedConfirmed
The covered entity (CE), Benefits Partner, LLC dba Salus Group, reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 40,177 individuals. The PHI involved included names, dates of birth, addresses, drivers’ license and Social Security numbers, claims and financial information, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 40,177 (as reported to HHS) |
|---|---|
| Disclosed | Apr 7, 2025 |
| Discovered | Oct 9, 2024 |
| Happened | Oct 9, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Benefits Partneratg.wa.gov · Official notice | Official notice |
| Vermont Attorney General: 2025-04-07 Benefits Partner Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Benefits Partner (Business Associate, MI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | Apr 7, 2025 | 1,315 |
| Vermont AGresidents of VT | Apr 7, 2025 | |
| HHS archivetotal | Apr 8, 2025 | 40,177 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 40177 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Benefits Partner, LLC dba Salus Group, reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 40,177 individuals. The PHI involved included names · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-04-07-benefits-partner-data-breach-notice-consumers · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.