A data breach at Benefits Management Group Inc. (BMGI), a provider specializing in employee benefits administration, has exposed sensitive personal and financial information of at least 501 individuals in the United States.
The cybersecurity incident was discovered Nov. 26, 2024, and an investigation revealed an unauthorized actor gained access and copied files over a period from Oct. 24, 2024, to Dec. 2, 2024. Compromised information includes names, dates of birth, Social Security numbers, driver's license or state identification numbers, financial account information, pension application information which also includes birth certificates, passport numbers, U.S. military certificates, marriage certificates and direct deposit information.
This type of data is particularly sensitive, as it can be used for identity theft and financial fraud. BMGI disclosed the data breach to the U.S. Department of Health and Human Services on Jan. 24, 2025 and published a Supplemental Notice of Data Security Event on its own website.
The cybersecurity incident was also exposed to the California and Massachusetts Attorney Generals' offices on July 17, 2025 and Texas on July 18, 2025. The total number of affected individuals has not been released, but includes at least 303 Massachusetts residents and 617 Texans.
In addition to required state and federal disclosures, affected individuals were offered free credit monitoring and identity restoration services through Equifax. BMGI has also set up a dedicated assistance line at 855-260-8115, Monday through Friday, 9:00 a.m. to 9:00 p.m. Eastern Time.
If you receive a notice from Benefits Management Group about this breach, you may want to:
For more details about the company, visit the Benefits Management Group Inc. website.