CBIZ Benefits & Insurance Services discloses data breach affecting client information

CBIZ Benefits & Insurance Services (CBIZ), a leading management consulting firm providing financial, benefits, and insurance services, has reported a significant data breach involving the unauthorized access of sensitive client information stored in its databases.

The breach, which occurred between June 2 and June 21, 2024, was caused by a vulnerability in one of CBIZ’s web pages, exploited by a threat actor to steal the data of nearly 36,000 individuals.

CBIZ discovered the breach on June 24, 2024. The discovery prompted an immediate investigation with the assistance of cybersecurity professionals, confirming that an unauthorized party had accessed the company’s databases during the specified period.

The compromised information includes a range of sensitive personal details such as names, contact details, social security numbers, dates of birth or death, retiree health information, and welfare plan information.

CBIZ began notifying affected individuals on August 28, 2024. Despite the breach, the company has stated that no evidence indicates the stolen data has been misused. To help mitigate potential risks, CBIZ is offering impacted clients a two-year credit monitoring and identity theft protection service. Additionally, clients are advised to place a credit/security freeze and add a fraud alert to their credit reports as precautionary measures.

CBIZ is one of the largest professional services firms in the United States, providing a comprehensive range of services, including accounting, tax, insurance solutions, business advisory, and human resources services. The company operates 120 offices across the country and employs 6,700 people. In 2023, CBIZ recorded a revenue of $1.59 billion.