413,032 Americans Affected As Major Data Breach Leaks Customer Names, Social Security Numbers, Financial Records and More

Hundreds of thousands of Americans are now at risk of identity theft and fraud after a major data breach at a human resources firm.

In a new filing with the Office of the Maine Attorney General, Maryland-based Kelly Benefits says it has discovered a significant cybersecurity incident impacting 413,032 people.

The company says an internal investigation revealed that an unknown entity gained unauthorized access to its database and stole sensitive customer information, including names, dates of birth, Social Security numbers, tax ID numbers, medical and health insurance records and financial account datasets.

“The investigation determined Kelly Benefits’ environment was subject to unauthorized access between December 12th, 2024 and December 17th, 2024 and certain files were copied and taken.

Kelly Benefits then began a time-intensive and detailed review of all files affected by this event to determine what information was present in the impacted files and to whom it related.

Once this review was complete, Kelly Benefits reviewed its internal records to match the individual to the appropriate client or carrier. This analysis was completed on March 3rd, 2025.”

Kelly Benefits offers a wide array of HR-related services, including benefits administration, payroll solutions, retirement planning, compliance support and consulting services.

The firm says it issued letters of notice to affected individuals while offering a 12-month credit monitoring and identity theft protection services.

For now, Kelly Benefits says it “has seen no evidence of misuse of any information related to this incident.”

The firm says it has reported the data breach to federal law enforcement and regulatory agencies and will continue closely monitoring its security policies, procedures and tools.

Generated Image: Midjourney