Every public data breach

Disclosed this week47On record26,367

47 disclosed this week · 26,367 on record

Kelly & Associates Insurance Group

Disclosed Apr 9, 2025553,332 affectedConfirmed

Official notice

What is known

People affected553,332 (as reported to HHS)
DisclosedApr 9, 2025
DiscoveredDec 12, 2024
HappenedDec 12, 2024
AttackHacking
Data exposedNamesHealthInsuranceCredentials and tokens
SectorInsurance · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: Kelly & Associates Insurance Group
Official noticeatg.wa.gov
Washington Attorney General breach notice: Kelly & Associates Insurance Group
Official noticeattorneygeneral.delaware.gov
Notice letter filed with the Delaware DOJ: Kelly and Associates Insurance Group
Official noticejustice.oregon.gov
Oregon DOJ breach notice: Kelly & Associates Insurance Group
Official noticeocrportal.hhs.gov
HHS OCR breach report: Kelly & Associates Insurance Group (Business Associate, MD)
Official noticein.gov
Indiana Attorney General 2025 data breach report: Kelly & Associates Insurance Group

Notices filed

Residents of CAApr 9, 2025
California AGCount not stated
Residents of DEApr 9, 2025
Delaware DOJ343 people
TotalApr 9, 2025
HHS OCR553,332 people
Residents of INApr 9, 2025
Indiana AG4,747 people
Residents of DEApr 9, 2025
Delaware DOJ343 people
Residents of CAApr 21, 2025
California AGCount not stated
Residents of WAApr 21, 2025
Washington AG5,640 people
Residents of ORApr 21, 2025
Oregon DOJ263,893 people
Residents of CAMay 2, 2025
California AGCount not stated
Residents of CAMay 30, 2025
California AGCount not stated
Residents of CAJun 30, 2025
California AGCount not stated
History of this record
source2026-09-25
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource
records_basis2026-09-25
organization to hhsby backfillSource
records2026-09-25
32234 to 553332by backfillSource
data_types2026-09-25
[] to ["names","health","insurance","credentials"]by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 32234by backfillSource
attack2026-09-25
unknown to hackingby backfillSource
discovered2026-09-25
empty to 2024-12-12by backfillSource
occurred2026-09-25
empty to 2024-12-12by backfillSource
disclosed2026-09-25
2025-04-21 to 2025-04-09by backfillSource
disclosed2026-09-25
2025-05-02 to 2025-04-21by backfillSource
disclosed2026-09-25
2025-05-30 to 2025-05-02by backfillSource
disclosed2026-09-25
2025-06-30 to 2025-05-30by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Kelly & Associates Insurance Group