Changeflow GovPing Government General Decisely Insurance Data Breach Compromised PII,...
Priority review Notice Added Final

Decisely Insurance Data Breach Compromised PII, SSN

Favicon for www.cyber.nj.gov NJ Cybersecurity: Public Data Breaches
Published January 8th, 2026
Detected March 18th, 2026
Email

Summary

Decisely Insurance reported a data breach in June 2025 that may have compromised personal information, including PII and SSNs. The NJCCIC advises affected individuals to review guidance on identity theft and compromised PII.

What changed

Decisely Insurance has disclosed a data breach discovered in its cloud storage environment, which may have exposed personal and protected health information of individuals. The compromised data includes names, dates of birth, phone numbers, passport numbers, digital signatures, and Social Security numbers. Notifications to affected individuals began around June 2025.

The NJCCIC recommends that individuals impacted by this breach review the provided guidance on compromised PII and identity theft. While no specific compliance actions are mandated for regulated entities in this notice, it serves as an alert to potential risks and the importance of robust data security measures for protecting sensitive personal information.

What to do next

  1. Review NJCCIC guidance on identity theft and compromised PII.
  2. Assess current data security protocols for cloud storage environments.

Source document (simplified)

Decisely Insurance

Post Date: 01/08/2026

Summary

Decisely Insurance discovered suspicious activity in its cloud storage environment. Following the investigation into the December 2024 data breach, some personal or protected health information may have been compromised, including name, date of birth, phone number, passport number, digital signature, and Social Security number. Decisely Insurance began notifying impacted individuals around June 2025, with further notifications thereafter. The NJCCIC recommends that affected individuals review the Compromised PII and Identity Theft NJCCIC Informational Report.

Return to full list >>

Source

Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
GP
Published
January 8th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Healthcare providers Insurers
Geographic scope
National (US)

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Topics
Cybersecurity Healthcare

Get Government General alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when NJ Cybersecurity: Public Data Breaches publishes new changes.

Free. Unsubscribe anytime.