Decisely Insurance Services, LLC, a benefits brokerage and HR services firm, experienced a data breach in 2025. The incident, caused by hackers accessing the company’s cloud storage platform, was discovered in June 2025. The company is classified as a HIPAA-regulated Business Associate.
The breach compromised various types of protected health information for 537,603 individuals. This included names, dates of birth, phone numbers, passport numbers, digital signatures, and Social Security numbers. While residents in Georgia were primarily affected, individuals in other states also received notifications. The full extent of affected states and the exact number of residents in each state have not been publicly detailed by Attorney General offices.
Data breach details can emerge over time, and notifications to affected individuals may experience delays.