Young Consulting data breach: what happened and what to do
Young Consulting, now Connexure, reported that attackers accessed its network from 10 to 13 April 2024. Its notice names names, Social Security numbers, dates of birth and insurance policy and claim information.
View all 13,115 breaches- Breach date
- 10 Apr 2024
- Made public
- 29 Jan 2025
- Data exposed
- Names, Social security numbers, Dates of birth, Health insurance information
- Last updated
What happened
Young Consulting is a software vendor to insurance and benefits companies. It now operates as Connexure. Its notice says an unauthorized party accessed its network between 10 and 13 April 2024. Comparitech reports that notices to 954,177 people went out in August 2024, and later counts were higher. The company hasn't described the incident as ransomware in its notice.
What was exposed
The notice lists names, Social Security numbers, dates of birth, and insurance policy and claim information. A Social Security number and date of birth are what criminals need to open credit in your name.
The company's response
Affected people were offered 12 months of credit monitoring through TransUnion, with a 90 day window to enroll from the date of the letter.
What it means for you
Because Young Consulting works for insurers, you may have received the letter through your insurer. If so, enroll in the monitoring before the window closes, and freeze your credit.
What to do if you were in it
- 1
Freeze your credit
Place a free credit freeze at Equifax, Experian and TransUnion. It blocks most new accounts opened in your name, and you can lift it whenever you apply for credit yourself.
- 2
Watch statements and credit reports
Check your bank, card and insurance statements for anything you don't recognize, and review your reports at annualcreditreport.com.
- 3
Expect phishing that mentions the breach
Emails, texts and calls may quote real details about you. Don't click links or give out information; go to the company's site yourself.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your details show up in a new leak.
Frequently asked
Was I affected by the Young Consulting breach?
Affected people received a letter. It may have come through an insurer or benefits provider that uses Young Consulting.
What was exposed?
The notice lists names, Social Security numbers, dates of birth, and insurance policy and claim information.
Should I change my password?
The notice doesn't mention passwords. Freezing your credit matters more here.
Sources
Something wrong or out of date? Tell us and we'll re-check it.