Data leak
Employee Benefits Administrator Hack β 2.7 Million Individuals Notified
Primary Source βIncident Details
A Washington State-based employee benefits administrator notified approximately 2.7 million individuals of a
data breach. The firm provides employee benefits enrollment, administration, and management services to
employers. Benefits administrators handle highly sensitive data including health insurance selections,
dependent information, Social Security numbers, employment records, and sometimes medical information. The
breach affected individuals across multiple client employers who relied on the administrator for benefits
management. Washington State’s AG office and HHS OCR were notified. The scale of impact (2.7 million) reflects
the concentration of employee data at benefits administration platform vendors.
Technical Details
- Initial Attack Vector
- Unknown attacker compromised a Washington State-based employee benefits administrator's systems, accessing employer and employee benefits enrollment data
Timeline
- 2026-03-19 Breach occurred
- 2026-03-19 Publicly disclosed