Enroll Confidently enrollconfidently.com Enroll Confidently data breach: what happened and what to do
Enroll Confidently, a benefits enrollment company, told California regulators on 16 August 2024 that an unauthorized person got into its network on 13 February 2024 and copied files. It offered Experian credit monitoring.
View all 13,177 breaches- Breach date
- 13 Feb 2024
- Made public
- 16 Aug 2024
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Enroll Confidently runs a benefits enrollment service for employers and benefits providers. In August 2024 it reported a cyberattack to state regulators.
The California Attorney General's breach list shows a breach date of 13 February 2024 and a report date of 16 August 2024. Washington's Attorney General also lists the notice. According to the notice letter, an unauthorized person gained access to the company's network on 13 February 2024 and copied certain files from the system.
The letter offered affected people credit monitoring through Experian IdentityWorks, with an enrolment deadline of 29 November 2024. That deadline has passed, so if you were affected, contact the company or Experian to ask whether the offer is still available.
The attorney general listings count residents of one state only, not everyone affected, so there is no total to quote here. What was involved differs between people, and the notice letter sets it out. Benefits enrollment records can hold identity and employment details, which criminals can use for identity theft and for believable phishing about your benefits.
If you get a letter or know your employer used Enroll Confidently, read the letter closely and follow the steps below.
Sources checked: oag.ca.gov, atg.wa.gov, consumer.ftc.gov
Last verified against the official page:
What to do if you were in it
- 1
Read your notice letter
It lists what was involved for you. If you didn't get one but your employer's benefits ran through Enroll Confidently, ask your HR team.
- 2
Watch for phishing about your benefits
Messages claiming to be your benefits provider or HR can use real details. Don't click links in unexpected messages. Sign in through the official site you already use.
- 3
Report identity theft if you see it
If accounts or loans appear that you didn't open, report it and get a recovery plan at IdentityTheft.gov.
- 4
Put a free credit freeze in place
A freeze stops new accounts being opened in your name. It's free at Equifax, Experian and TransUnion, and the FTC explains how: credit freezes and fraud alerts.
- 5
Check whether your email or phone is in this and other breaches
Run a free scan at Serus. Serus monitors breach databases and the dark web and alerts you when your data appears, so you know what to act on.
Official filings
- Washington Attorney General , filed 16 Aug 2024 : 694 people
Timeline
-
The breach happened
-
The company made it public
-
Reported to the Washington Attorney General
Frequently asked
Was I affected by the Enroll Confidently breach?
Affected people were sent a notice letter in August 2024. If your employer used Enroll Confidently and you got no letter, ask your HR team.
When did the Enroll Confidently breach happen?
According to the notice, an unauthorized person accessed the network on 13 February 2024. The company reported it on 16 August 2024.
What was exposed in the Enroll Confidently breach?
It differs by person and is set out in your notice letter.
Is the free credit monitoring still available?
The enrolment deadline in the letter was 29 November 2024. Contact the company or Experian to ask if the offer still applies.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
