Decisely Insurance Services, a tech-driven platform aiding small businesses in HR, benefits, and administrative tasks, experienced a data breach discovered on December 17, 2024. Unauthorized access to its cloud storage was traced to December 16, 2024, with confirmation on May 29, 2025 that the breach exposed sensitive personal data tied to its partner, MetLife. Compromised information includes names, dates of birth, addresses, phone numbers, Social Security numbers, email addresses, passport numbers, bank account details, and digital signatures affecting an estimated 113,984 individuals. The breach poses severe risks of identity theft, financial fraud, and reputational harm, prompting a class-action investigation by Edelson Lechtzin LLP to seek legal remedies for victims. Decisely secured its network post-discovery but failed to prevent the large-scale exposure of highly sensitive data, including financial and personally identifiable information (PII). Affected individuals are advised to monitor credit reports and account statements for suspicious activity, highlighting the breach’s potential for long-term financial and privacy repercussions.
TPRM report: https://www.rankiteo.com/company/decisely
"id": "dec5162151101025",
"linkid": "decisely",
"type": "Breach",
"date": "12/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '113,984 individuals',
'industry': 'Insurance & HR Technology',
'location': 'USA',
'name': 'Decisely Insurance Services',
'type': 'Private Company'},
{'industry': 'Insurance',
'location': 'USA (global operations)',
'name': 'MetLife (partner of Decisely)',
'type': 'Public Company'}],
'attack_vector': 'Unauthorized access to cloud storage platform',
'customer_advisories': ['Data breach notifications sent to affected '
'individuals',
'Guidance provided on protecting personal data (e.g., '
'monitoring credit reports)'],
'data_breach': {'data_exfiltration': 'Likely (unauthorized access confirmed)',
'number_of_records_exposed': '113,984',
'personally_identifiable_information': True,
'sensitivity_of_data': 'High (includes SSNs, passport '
'numbers, bank account details)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial Data',
'Authentication Data']},
'date_detected': '2024-12-17',
'date_publicly_disclosed': '2025-10-09',
'description': 'Decisely Insurance Services, a tech-driven platform for small '
'businesses managing HR, benefits, and administrative tasks, '
'detected unusual activity in its cloud storage platform on '
'December 17, 2024. An investigation confirmed unauthorized '
'access on December 16, 2024, potentially exposing personal '
'data linked to its partner, MetLife. The breach affected an '
'estimated 113,984 individuals, with compromised data '
'including names, dates of birth, addresses, phone numbers, '
'Social Security numbers, email addresses, passport numbers, '
'bank account details, and digital signatures. A class action '
'lawsuit is being investigated by Edelson Lechtzin LLP.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'class action lawsuit and exposure of '
'sensitive data',
'data_compromised': ['names',
'dates of birth',
'addresses',
'phone numbers',
'Social Security numbers',
'email addresses',
'passport numbers',
'bank account details',
'digital signatures'],
'identity_theft_risk': 'High (due to exposure of SSNs, passport '
'numbers, and bank account details)',
'legal_liabilities': 'Class action lawsuit investigation by '
'Edelson Lechtzin LLP',
'payment_information_risk': 'High (bank account details exposed)',
'systems_affected': ['Cloud storage platform']},
'initial_access_broker': {'entry_point': 'Cloud storage platform',
'high_value_targets': ['MetLife partner data']},
'investigation_status': 'Ongoing (class action lawsuit investigation as of '
'2025-10-09)',
'recommendations': ['Monitor account statements and credit reports for '
'suspicious activity (advised to affected individuals)',
'Implement stronger access controls for cloud storage '
'platforms',
'Enhance third-party risk management (given MetLife data '
'exposure)'],
'references': [{'date_accessed': '2025-10-09',
'source': 'GLOBE NEWSWIRE Press Release'},
{'source': 'Edelson Lechtzin LLP Investigation Page',
'url': 'www.edelson-law.com'}],
'regulatory_compliance': {'legal_actions': ['Class action lawsuit '
'investigation by Edelson '
'Lechtzin LLP']},
'response': {'communication_strategy': ['Public disclosure via press release '
'(2025-10-09)',
'Data breach notifications to '
'affected individuals'],
'containment_measures': ['Secured network environment'],
'incident_response_plan_activated': True},
'title': 'Decisely Insurance Services Data Breach (2024-2025)',
'type': 'Data Breach'}