Kelly Benefits Notifying Nearly 264,000 of Data Theft Hack

A data breach at Maryland-based Kelly Benefits has significantly expanded in scope, now affecting nearly 264,000 individuals—up from the 32,000 initially reported earlier this month. The December 2024 hack led to unauthorized access and exfiltration of sensitive personal data, including Social Security numbers, medical and financial information. The breach impacts clients such as CareFirst BlueCross BlueShield and Guardian Life, among others. Kelly Benefits has notified the FBI and is reviewing its security posture, while a federal class action lawsuit has been filed, alleging negligence and ongoing risks of identity fraud.