Young Consulting, now rebranded as Connexure, is notifying 954,177 individuals about a significant data breach linked to a ransomware attack by the BlackSuit group that occurred in April 2024.

The breach, which compromised the personal information of over 950,000 individuals, was discovered after the company experienced technical difficulties on April 13.

An investigation revealed that unauthorized access to Young Consulting's network occurred between April 10 and April 13, during which sensitive data was stolen and systems were encrypted.

The company confirmed that attackers gained unauthorized access to its infrastructure, leading to the theft of various types of sensitive information.

Compromised personal information includes full names, Social Security numbers, dates of birth, insurance policy details, and provider names.

The majority of the compromised data originated from health insurer Blue Shield of California, which was identified as one of the impacted entities.

The BlackSuit ransomware group claimed responsibility for the attack and has leaked additional stolen data beyond what Young Consulting disclosed.

In response to the breach, affected individuals are being offered a 12-month free credit monitoring service through Cyberscout, available until the end of November 2024.

Upon discovering the breach, Young Consulting took its systems offline and initiated an investigation with a cybersecurity firm.

The ransomware group has made the allegedly stolen data available for download after the company refused to comply with their extortion demands.

Young Consulting specializes in software solutions for the employer stop-loss insurance marketplace, providing essential operational support for insurance carriers and brokers.

Despite the severity of the breach, Young Consulting has not disclosed extensive details regarding the attack or the affected entities.