Data leak

Employee Benefits Administrator Hack β€” 2.7 Million Individuals Notified

πŸ“… 2026-03-19
Primary Source β†—

Incident Details

A Washington State-based employee benefits administrator notified approximately 2.7 million individuals of a data breach. The firm provides employee benefits enrollment, administration, and management services to employers. Benefits administrators handle highly sensitive data including health insurance selections, dependent information, Social Security numbers, employment records, and sometimes medical information. The breach affected individuals across multiple client employers who relied on the administrator for benefits management. Washington State’s AG office and HHS OCR were notified. The scale of impact (2.7 million) reflects the concentration of employee data at benefits administration platform vendors.

Technical Details

Initial Attack Vector
Unknown attacker compromised a Washington State-based employee benefits administrator's systems, accessing employer and employee benefits enrollment data

Timeline

  1. 2026-03-19 Breach occurred
  2. 2026-03-19 Publicly disclosed