VeriSource Services

Disclosed Aug 20, 20244,000,000 affectedConfirmed

VeriSource says February 2024 breach exposed data of 4 million people

Benefits administrator VeriSource said an unknown actor acquired personal data around February 27, 2024, and after a review completed April 17, 2025 began notifying about 4 million people; data included names, addresses, birth dates and SSNs.

What is known

People affected	4,000,000 (as reported by the organization)
Disclosed	Aug 20, 2024
Discovered	Feb 28, 2024
Happened	Feb 28, 2024
Attack	Hacking
Data exposed	NamesAddressesDates of birthSocial Security numbersEmploymentHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: VeriSource Services

Official noticeatg.wa.gov

Washington Attorney General breach notice: VeriSource Services

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: VeriSource Services

Official noticejustice.oregon.gov

Oregon DOJ breach notice: VeriSource Services

Newsbleepingcomputer.com

VeriSource now says February data breach impacts 4 million people

Official noticeago.vermont.gov

Vermont Attorney General: 2025-04-23 VeriSource Services Data Breach Notice to Consumers

Official noticeago.vermont.gov

Vermont Attorney General: 2024-08-21 VeriSource Services Data Breach Notice to Consumers

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): VeriSource Services (Business Associate, TX)

Notices filed

Residents of CAAug 20, 2024

California AGCount not stated

TotalAug 20, 2024

HHS archive112,726 people

Residents of VTAug 21, 2024

Vermont AGCount not stated

Residents of CANov 6, 2024

California AGCount not stated

Residents of DEApr 23, 2025

Delaware DOJ10,682 people

TotalApr 23, 2025

Research4,000,000 people

Residents of VTApr 23, 2025

Vermont AGCount not stated

Residents of DEApr 23, 2025

Delaware DOJ10,682 people

Residents of CAApr 25, 2025

California AGCount not stated

Residents of WAApr 25, 2025

Washington AG85,880 people

Residents of ORApr 26, 2025

Oregon DOJ4,052,972 people

History of this record

data_types2026-09-25

["names","addresses","dob","ssn","employment"] to ["names","addresses","dob","ssn","employment","health"]by backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2024-08-21-verisource-services-data-breach-notice-consumersby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2025-04-23-verisource-services-data-breach-notice-consumersby backfillSource

attack2026-09-25

ransomware to hackingby seedSource

data_types2026-09-25

["names"] to ["names","addresses","dob","ssn","employment"]by seedSource

summary2026-09-25

empty to Benefits administrator VeriSource said an unknown actor acquired personal data around February 27, 2024, and after a review completed April 17, 2025 began notifying about 4 million people; data included names, addresses, birth dates and SSNby seedSource

title2026-09-25

empty to VeriSource says February 2024 breach exposed data of 4 million peopleby seedSource

data_types2026-09-25

[] to ["names"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 4000000by backfillSource

sector2026-09-25

other to healthby backfillSource

attack2026-09-25

unknown to ransomwareby backfillSource

discovered2026-09-25

empty to 2024-02-28by backfillSource

disclosed2026-09-25

2024-11-06 to 2024-08-20by backfillSource

disclosed2026-09-25

2025-04-25 to 2024-11-06by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about VeriSource Services