Kelly & Associates Data Breach Lawsuit Investigation
Were you one of the 533,660 people alerted about the Kelly & Associates (Kelly Benefits) data breach? Sensitive medical and financial details may now be in criminal hands. Find out how to protect yourself and whether you can file a claim today.
Quick Facts About the Kelly Benefits Breach
- Breach window: December 12–17, 2024
- Discovery date: March 3, 2025
- Total individuals affected: 533,660 nationwide (latest July 1, 2025 filing)
- Data types exposed: Names, Social Security numbers, Tax ID numbers, dates of birth, addresses, medical & health-insurance details, financial account information, government IDs
- Free services offered: 12 months of IDX credit monitoring & identity protection (opt-in required)
What Happened?
Kelly & Associates Insurance Group, Inc.—better known as Kelly Benefits—detected suspicious activity in its network and brought in forensic specialists. Investigators later determined that hackers gained unauthorized access between December 12 and December 17, 2024, copying certain files that contained highly sensitive personal and health information.
The breach was confirmed on March 3, 2025. Since then, the company has filed multiple amended reports as its investigation uncovered additional impacted records, pushing the tally from an initial 32,234 up to 533,660 people across the United States.
Whose Information Is at Risk?
The breach affects current and former benefit plan participants, employees, and potentially their dependents. State filings list victims in:
- Texas – at least 17,775 residents
- California – 500+ residents
- Maine – 18,855 residents
- Massachusetts – 158 residents
- South Carolina – 197 residents
- New Hampshire – 1,026 residents
- Vermont and other states – undisclosed counts
Because the exposed data includes both financial and protected health information (PHI), impacted individuals face an elevated risk of identity theft, medical fraud, and tax-refund scams.
Next Steps to Protect Yourself
- Enroll in the free IDX services offered in your notification letter before the deadline.
- Place a fraud alert or credit freeze with Experian, Equifax, or TransUnion to stop new credit lines.
- Monitor bank, credit-card, and insurance-explanation-of-benefits statements for suspicious activity.
- File your taxes early to beat potential tax-return fraudsters.
- Report any identity-theft incidents to the FTC’s IdentityTheft.gov and local law enforcement.
Your Legal Options
Data-breach laws allow victims to seek monetary relief for out-of-pocket expenses, time spent remediating fraud, and future credit-monitoring costs. Class-action investigations are underway to determine whether Kelly Benefits:
- Implemented adequate cybersecurity measures
- Complied with federal and state data-protection regulations (HIPAA, state privacy statutes)
- Notified victims in a timely and transparent manner
If you received a breach letter, you may qualify to join a lawsuit and pursue compensation without any upfront fees.
Download Official Breach Notice (PDF)Frequently Asked Questions
How do I know if I was part of the Kelly & Associates data breach?
You should have received a written notice dated April 9, 2025 (or later amendments). If you believe you were a Kelly Benefits client or plan participant but did not get a letter, contact the company’s dedicated hotline listed on its Data Event page.
What information did hackers obtain from Kelly & Associates?
Files contained full names, Social Security numbers or Tax ID numbers, dates of birth, addresses, financial-account details, medical information, and health-insurance data—enough to commit multiple forms of identity theft.
Is Kelly & Associates offering credit monitoring?
Yes. The company is providing 12 months of complimentary credit monitoring and identity-theft protection through IDX. You must enroll using the activation code in your notice letter.
Can I sue Kelly & Associates for the data breach?
Potentially. Class-action attorneys are investigating whether victims are entitled to financial compensation. Eligibility typically depends on receiving an official breach notification or proof that your data was stored by Kelly Benefits during the breach period.
Will placing a credit freeze hurt my credit score?
No. A credit freeze does not affect your credit score and can be lifted temporarily when you need to apply for credit.
What should I do if I detect fraud linked to the Kelly Benefits breach?
Immediately report the fraud to the affected financial institution, file an identity-theft report with the FTC, and consider filing a police report. Keep documentation of all expenses and time spent; these records can support any future compensation claim.