Decisely Insurance Services
Disclosed Jun 13, 20251 year ago537,603 affectedConfirmed
Cloud storage hack at benefits broker Decisely exposes 537,603 people
Benefits brokerage Decisely said its cloud storage platform was accessed and data acquired on December 16, 2024; it first notified 65,405 people and later determined 537,603 were affected, with data including SSNs and passport numbers.
What is known
| People affected | 537,603 (as reported by the organization) |
|---|---|
| Disclosed | Jun 13, 2025 |
| Discovered | Dec 17, 2024 |
| Happened | Dec 15, 2024 |
| Attack | Hacking |
| Data exposed | Names, Dates of birth, Phone numbers, Government IDs, Social Security numbers, Other, Payment cards, Financial, Addresses, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Decisely Insurance Servicesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Decisely Insurance Servicesatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Decisely Insurance Servicesjustice.oregon.gov · Official notice | Official notice |
| Data Breaches Announced By Decisely Insurance Services & Apex Global Solutionshipaajournal.com · News | News |
| Largest Healthcare Data Breaches of 2025hipaajournal.com · News | News |
| Texas Attorney General data security breach report BR-0004767: Decisely Insurance Servicesoag.my.site.com · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Decisely Insurance Services (Business Associate, GA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jun 13, 2025 | 24,737 |
| California AGresidents of CA | Jun 14, 2025 | |
| Washington AGresidents of WA | Jun 14, 2025 | 8,065 |
| Researchtotal | Jun 25, 2025 | 537,603 |
| California AGresidents of CA | Jul 21, 2025 | |
| California AGresidents of CA | Oct 7, 2025 | |
| Oregon DOJresidents of OR | Oct 8, 2025 | 113,984 |
| Oregon DOJresidents of OR | Dec 30, 2025 | 261,155 |
| Texas AGresidents of TX | Jan 5 | 59,740 |
History of this record
- 2026-09-25 · data_types: ["names","dob","phone","government-id","ssn","other","payment-card","financial","addresses"] to ["names","dob","phone","government-id","ssn","other","payment-card","financial","addresses","health"] · backfill source
- 2026-09-25 · disclosed: 2025-06-14 to 2025-06-13 · backfill source
- 2026-09-25 · data_types: ["names","dob","phone","government-id","ssn","other"] to ["names","dob","phone","government-id","ssn","other","payment-card","financial","addresses"] · backfill source
- 2026-09-25 · data_types: [] to ["names","dob","phone","government-id","ssn","other"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 537603 · seed source
- 2026-09-25 · summary: empty to Benefits brokerage Decisely said its cloud storage platform was accessed and data acquired on December 16, 2024; it first notified 65,405 people and later determined 537,603 were affected, with data including SSNs and passport numbers. · seed source
- 2026-09-25 · title: empty to Cloud storage hack at benefits broker Decisely exposes 537,603 people · seed source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2024-12-17 · backfill source
- 2026-09-25 · disclosed: 2025-07-21 to 2025-06-14 · backfill source
- 2026-09-25 · disclosed: 2025-10-07 to 2025-07-21 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.