Employee-Benefits Administrator Sued Over December Data Breach

Kelly & Associates Insurance Group Inc. negligently failed to protect the personal information of thousands of people that was exposed in a December 2024 data breach, a proposed federal class action said.

Lead plaintiff Carolyn Gale alleged that Kelly & Associates breached its duties under common law, contract law, industry standards, the Federal Trade Commission Act, and the Health Insurance Portability and Accountability Act to implement reasonable and adequate data-security measures and provide timely notice of the incident.

Information exposed in the incident included names, Social Security numbers, and protected health information contained in the University of Maryland Medical System, ...