Cove Risk Services Data Breach Exposes Sensitive Information of Nearly 50,000 Individuals
In May 2025, Cove Risk Services, LLC—a Massachusetts-based insurance provider specializing in workers’ compensation coverage for over 5,000 businesses in Massachusetts and New Hampshire—discovered a significant data breach. The company detected unauthorized access to its network between May 3 and May 5, 2025, following a network disruption on May 5. After completing its investigation on November 10, 2025, Cove Risk Services confirmed that the breach exposed the personal data of 49,385 individuals, including 182 Maine residents.
The compromised information includes names, Social Security numbers, dates of birth, driver’s license numbers, health insurance details, medical records, financial account information, and passport numbers.
Affected individuals began receiving breach notifications on December 12, 2025. As part of its response, Cove Risk Services offered 12 months of free credit monitoring and identity protection services through Cyberscout (a TransUnion company), with enrollment available for 90 days following notification.
The law firm Shamis & Gentile P.A. is investigating potential legal claims on behalf of those impacted, citing possible compensation for damages related to the exposure of sensitive data.
Source: https://www.claimdepot.com/investigations/cove-risk-services-data-breach-2025
COVE RISK SERVICES, LLC cybersecurity rating report: https://www.rankiteo.com/company/cove-risk-services-llc
"id": "COV1765649046",
"linkid": "cove-risk-services-llc",
"type": "Breach",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '49,385 individuals',
'industry': 'Insurance',
'location': 'Braintree, Massachusetts, USA',
'name': 'Cove Risk Services, LLC',
'type': 'Insurance Company'}],
'customer_advisories': 'Notification letters sent to affected individuals '
'with instructions for credit monitoring enrollment',
'data_breach': {'number_of_records_exposed': '49,385',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Dates of birth',
'Driver’s license or '
'state-issued identification '
'numbers',
'Health insurance information',
'Medical information',
'Financial account information',
'Passport numbers']},
'date_detected': '2025-05-05',
'date_publicly_disclosed': '2025-12-12',
'description': 'Cove Risk Services, LLC experienced a data breach in May '
'2025, exposing sensitive personally identifiable information '
'of 49,385 individuals in the United States, including names, '
'Social Security numbers, dates of birth, driver’s license '
'numbers, health insurance information, medical information, '
'financial account information, and passport numbers.',
'impact': {'data_compromised': 'Sensitive personally identifiable information',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Completed review of affected data',
'recommendations': ['Enroll in credit monitoring and identity protection '
'services',
'Review credit reports and financial account statements '
'regularly',
'Place a fraud alert or credit freeze on your credit file',
'File a report with law enforcement, state attorney '
'general, and the FTC if identity theft is suspected'],
'references': [{'source': 'Shamis & Gentile P.A.',
'url': 'https://bfs.cyberscout.com/activate'}],
'response': {'communication_strategy': 'Notification letters sent to affected '
'individuals',
'enhanced_monitoring': '12 months of complimentary credit '
'monitoring and identity protection '
'services',
'third_party_assistance': 'Cyberscout (TransUnion)'},
'title': 'Cove Risk Services, LLC Data Breach',
'type': 'Data Breach'}