Benefits Partner, LLC dba Salus Group (“Salus Group”) is an independent insurance agency that provides insurance brokerage and consulting services. We are committed to protecting the confidentiality and security of the information we maintain.
Regrettably, we recently notified individuals of a security incident that involved some of their information. For certain individuals, we received the information involved by or on behalf of the individual’s current or former employer and/or insurance carrier in connection with the services we provide.
In October, we identified suspicious activity in one employee’s email account. We immediately disabled the account, reset the employee’s password, and began an investigation with assistance from a third-party forensic firm. Through the investigation, we determined that there was unauthorized access to the account for a period of time on October 9, 2024. The investigation was unable to determine which emails, if any, were viewed by the unauthorized person. Accordingly, we conducted a comprehensive review of the contents of the email account. This review included identifying emails and attachments with personal information; cataloging the information; determining our relationship with each identified individual; and determining from whom we received the information.
We completed our analysis of the data involved in late February 2025 and began informing employers and insurance carriers of the incident on or around March 27, 2025. The information involved varied by individual but generally included names, dates of birth, Social Security numbers, drivers’ license numbers, financial account information, health insurance information, and/or clinical or treatment information.
Importantly, this incident did not involve all Salus Group clients; but only those whose information was contained in the affected email account.
We have no indication that any information involved in this incident has been misused. However, as a precaution, we are mailing notification letters to individuals whose information was identified in the affected account and for whom we had sufficient contact information. We have also established a dedicated, toll-free call center to answer questions that individuals may have about the incident. If you have questions, please call (866) 408-1493, available Monday through Friday, between 9:00 a.m. and 6:30 p.m., Eastern Time.
We are providing all individuals with a complimentary membership to credit monitoring and identity protection support services through Kroll. Additional information about Kroll Identity Monitoring, including how to activate these services at no charge, is included in the letters mailed to individuals. We also would like to remind individuals that it is always a good idea to be vigilant for incidents of fraud or identity theft by reviewing their account statements and free credit reports for any unauthorized activity.
Again, we regret that this incident occurred and for any concern or inconvenience it may have caused. To help prevent a similar incident from occurring in the future, we implemented additional security controls in our email environment and are providing employees with further training on how to identify and avoid suspicious emails.