Coalesce
Disclosed Oct 15, 202511 months ago29,023 affectedConfirmed
What is known
| People affected | 29,023 (as reported by the organization) |
|---|---|
| Disclosed | Oct 15, 2025 |
| Discovered | Apr 2, 2025 |
| Happened | Mar 30, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health, Social Security numbers, Insurance, Addresses |
| Sector | Data brokers · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Coalesceoag.ca.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Coalescejustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report: Coalesce (Business Associate, AZ)ocrportal.hhs.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0004929: Coalesceoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2026-03-23 Coalesce, LLC dba Benefitelect - Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: Coalescein.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Oct 15, 2025 | |
| HHS OCRtotal | Oct 15, 2025 | 501 |
| Oregon DOJresidents of OR | Dec 24, 2025 | 1,396 |
| California AGresidents of CA | Mar 23 | |
| Texas AGresidents of TX | Mar 23 | 4,054 |
| Vermont AGresidents of VT | Mar 23 | |
| Indiana AGresidents of IN | Mar 23 | 27 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2026-03-23-coalesce-llc-dba-benefitelect-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: ["names","health"] to ["names","health","ssn","insurance","addresses"] · backfill source
- 2026-09-25 · records_basis: hhs to organization · backfill source
- 2026-09-25 · records: 501 to 29023 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 501 · backfill source
- 2026-09-25 · discovered: empty to 2025-04-02 · backfill source
- 2026-09-25 · disclosed: 2026-03-23 to 2025-10-15 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.