A significant data breach has compromised the personal information of over 413,000 individuals, raising concerns about potential identity theft and fraud. The breach occurred at Kelly Benefits, a Maryland-based human resources firm, which reported the incident in a recent filing with the Office of the Maine Attorney General.
The cybersecurity breach reportedly took place over a five-day period from December 12th to December 17th, 2024. Kelly Benefits conducted an internal investigation that revealed unauthorized access to its database, resulting in the theft of sensitive information including names, dates of birth, Social Security numbers, tax ID numbers, and medical records. The firm’s full disclosure can be found in their official announcement here.
Following the investigation’s conclusion on March 3rd, 2025, Kelly Benefits began a comprehensive review of the affected files to match the data to individual client records. The firm has since issued letters to the impacted individuals, offering them 12 months of credit monitoring and identity theft protection services, in an effort to mitigate the potential risks arising from this incident.
Despite the severity of the breach, Kelly Benefits has stated that they have not seen any evidence of misuse of the compromised information. The company has also alerted federal law enforcement and regulatory agencies about the breach, demonstrating their commitment to addressing security vulnerabilities within their operations. In light of this incident, the firm is reportedly revisiting its security policies and monitoring procedures to prevent future occurrences.