January 30, 2024 at 07:30AM
Keenan & Associates has notified over 1.5 million individuals of a cyberattack in August 2023 that led to unauthorized access to personal information. Data including names, dates of birth, Social Security numbers, and health information was exfiltrated. The company is providing identity protection services and encouraging vigilance against identity theft and fraud.
The meeting notes indicate that Keenan & Associates, an insurance consulting and brokerage firm, experienced a cyberattack in August 2023, where more than 1.5 million individuals had their personal information compromised. The attackers gained unauthorized access to Keenan’s internal systems between August 21, 2023 and August 27, 2023, exfiltrating data including names in combination with dates of birth, Social Security numbers, driver’s license numbers, passport numbers, health insurance information, and general health information.
Keenan has taken steps to notify impacted clients and individuals, sending written notifications and offering two years of complimentary identity protection services to detect any potential misuse of compromised personal information. Additionally, the firm has informed the Maine Attorney General’s Office and has enhanced its network security to prevent similar incidents. Keenan has observed no further unauthorized activity since the attack.
The notes do not mention whether ransomware was involved in the attack. The impacted individuals are encouraged to remain vigilant against potential incidents of identity theft and fraud.