Insurance group Kelly Benefits says over half a million people now affected in major data breach - here's what we know

• Kelly Benefits confirms thousands of users affected in breach
• Victims are offered free ID theft protection and credit monitoring
• The organization urges users to remain vigilant

Insurance group Kelly Benefits has confirmed suffering a cyberattack in which it lost sensitive information on more than half a million customers.

In a data breach notification published on its website, the company said “suspicious activity” on its network prompted it to bring in third-party forensic specialists for an investigation - and the results showed a threat actor breaching the network between December 12 - 17, 2024, stealing “certain files”.

By early March 2025, Kelly Benefits determined that it lost people’s full names, Social Security numbers, tax ID numbers, dates of birth, medical information, health insurance information, and financial account information. The combination of the data stolen varies from person to person.