Maryland insurance group reports massive data breach — 553,332 records exposed
A Maryland-based insurance group, Kelly & Associates Insurance Group, Inc., has filed a report with HHS OCR regarding a significant data breach. As a Business Associate, this entity handles protected health information on behalf of covered entities. The filing, submitted on April 9, 2025, indicates that a hacking/IT incident compromised data stored on a network server. The breach affects 553,332 individuals. Healthcare administrators should note this as a high-volume incident involving a vendor. While the submission date is April 9, the actual breach likely occurred earlier. This event highlights the risks associated with third-party data storage and the importance of monitoring vendor security practices.
Sources differ:
- The HHS OCR breach portal lists 553,332 individuals; press reports citing the Maine Attorney General's filing say 553,660.
Primary source: HHS OCR Breach Portal — Kelly & Associates Insurance Group, Inc. (MD) · reported 04/09/2025 · 553,332 individuals · Checked against the record 2026-10-23