Dozens of Corporations Caught in Kelly Benefits Data Breach: A Stark Warning on Corporate Data Security

The Unfolding Breach and Its Impact On July 2, 2025, benefits administration specialist Kelly & Associates Insurance Group (dba Kelly Benefits) publicly disclosed a data breach affecting over 550,000 individuals across 46 client organizations. The incident, first detected in mid-December 2024, saw unauthorized actors siphon sensitive files harboring personal and health information, marking one of the most significant exposures in the employee benefits sector in recent memory. Timeline of Detection and Disclosure Suspicious network activity was identified by Kelly Benefits’ security team on December 17, 2024, prompting the immediate engagement of third-party digital forensics experts. Investigators confirmed unauthorized access occurred between December 12–17, during which files containing personal data were copied and exfiltrated. Public notification began on April 9, 2025, with initial estimates of 32,234 impacted individuals; that figure was subsequently revised to ...