{"id":681,"date":"2023-05-03T05:53:02","date_gmt":"2023-05-03T10:53:02","guid":{"rendered":"https:\/\/kentprotect.com\/?p=681"},"modified":"2023-05-04T15:00:28","modified_gmt":"2023-05-04T20:00:28","slug":"breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/","title":{"rendered":"Breach Report: NationsBenefits Fortra breach affects Aetna and 15,000+ consumers"},"content":{"rendered":"<div class='booster-block booster-read-block'><\/div>\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>One-sentence summary: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NationsBenefits was breached by the Clop ransomware group in the early 2023 Fortra breach campaign, affecting over 15,000+ consumers and potentially Aetna customers. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Who was involved?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NationsBenefits Holding, LLC, Fortra, LLC, Santa Clara Family Health Plan (SCFHP), 15,971+ consumers, potentially Aetna, and the Clop ransomware group. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What was the timeline?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">January 30, 2023: NationsBenefits is part of a breach targeting multiple organizations via Fortra <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">February 7, 2023: NationsBenefits discovers the breach<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">April 13, 2023: NationsBenefits begins consumer notification<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What occurred?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NationsBenefits was breached in the Clop ransomware group campaign against Fortra GoAnywhere clients, previously reported in a <a href=\"https:\/\/kentprotect.com\/index.php\/2023\/02\/16\/2023-community-health-systems-chs-inc-data-breach\/\" target=\"_blank\" rel=\"noreferrer noopener\">separate breach report on Community Health Systems (CHS)<\/a> (SC Staff, 2023). Breach notification filings for NationsBenefits were found in many states, but the personal information involved has been redacted. Breached data per a news agency allegedly included &#8220;first name, middle initial, last name, gender, health plan ID number, address, phone number and date of birth&#8221; (Lampariello, 2023). No official headcount has been released, but just in Delaware alone, 15,971 consumers were identified in their breach notification (NationsBenefits, 2023b). NationsBenefits is also identified as a vendor for Aetna health insurance, associating Aetna with the breach (Lampariello, 2023). Finally, Santa Clara Family Health Plan (SCFHP) was also identified as a <a href=\"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/\" target=\"_blank\" rel=\"noreferrer noopener\">client involved in the breach<\/a>. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Estimated costs:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Associated incident response costs, breach notification costs, a &#8220;leading cybersecurity firm&#8221; <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Involved laws: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">State: Vermont: 9 V.S.A. \u00a7 2435<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">California: CCPA and Cal. Civ. Code \u00a7 1798.29(a)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Delaware: Del. Code Ann. tit. 6 \u00a7 12B-101 et seq.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">New Hampshire: N.H. Rev. Stat. \u00a7 359-C:19 et seq.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Montana: Mont. Code Ann. \u00a7 30-14-1704<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Root cause: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The zero-day, remote code execution vulnerability in Fortra\u2019s GoAnywhere MFT solution (CVE-2023-0669) (Gatlan, 2023, paras. 8-11; Duffy, 2023, p. 1).<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Lessons learned: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TBA or N\/A (see disclaimer) (GoAnywhere is marketed as a HIPAA and HITECH-compliant SFTP solution) (Fortra, n.d.).<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Sources: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Duffy, R. (2023). Re: Data Security Incident. In <em>Security Breach Notifications<\/em>. New Hampshire Department of Justice Office of the Attorney General. Retrieved May 4, 2023, from https:\/\/www.doj.nh.gov\/consumer\/security-breaches\/documents\/nationsbenefits-holdings-20230413.pdf<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Fortra. (n.d.).\u00a0<em>HIPAA &amp; HITECH Compliant File Transfers<\/em>. goanywhere.com. Retrieved February 16, 2023, from https:\/\/www.goanywhere.com\/solutions\/compliance\/hipaa-hitech<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Gatlan, S. (2023, February 14).&nbsp;<em>Healthcare giant CHS reports first data breach in GoAnywhere hacks<\/em>. BleepingComputer. Retrieved February 16, 2023, from https:\/\/www.bleepingcomputer.com\/news\/security\/healthcare-giant-chs-reports-first-data-breach-in-goanywhere-hacks\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Lampariello, D. (2023, May 3). Vendor for Aetna insurance announces data breach. <em>WGME<\/em>. Retrieved May 3, 2023, from https:\/\/wgme.com\/news\/i-team\/vendor-aetna-insurance-data-breach-maine<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NationsBenefits. (2023a). 2023-04-13 NationsBenefits Holdings Data Breach Notice to Consumers.pdf. In <em>Charity R. Clark Office of the Vermont Attorney General<\/em>. State of Vermont. Retrieved May 3, 2023, from https:\/\/ago.vermont.gov\/sites\/ago\/files\/2023-04\/2023-04-13%20NationsBenefits%20Holdings%20Data%20Breach%20Notice%20to%20Consumers.pdf<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NationsBenefits. (2023b). Data Security Breach Database. In <em>DELAWARE DEPARTMENT OF JUSTICE ATTORNEY GENERAL KATHY JENNINGS<\/em>. State of Delaware. Retrieved May 3, 2023, from https:\/\/attorneygeneral.delaware.gov\/fraud\/cpu\/securitybreachnotification\/database\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NationsBenefits (businesswire). (n.d.). <em>NationsBenefits-logo-horiz-c.jpg<\/em>. Businesswire. https:\/\/mms.businesswire.com\/media\/20210826005241\/en\/1040665\/23\/NationsBenefits-logo-horiz-c.jpg<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">SC Staff. (2023). NationsBenefits impacted by Clop GoAnywhere attacks. <em>SC Media<\/em>. https:\/\/www.scmagazine.com\/brief\/ransomware\/nationsbenefits-impacted-by-clop-goanywhere-attacks<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"NationsBenefits was breached in early 2023 via Fortra&#039;s GoAnywhere vulnerability\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/tYeQwgnhxb0?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">YouTube\/Blog Notification Post<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>One-sentence summary: NationsBenefits was breached by the Clop ransomware group in the early 2023 Fortra breach campaign, affecting<\/p>\n","protected":false},"author":4,"featured_media":682,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[576,480,3,12,85,285,13,76,63,274,75,61,11,10,74,300,14,373,45,566,8,27,19,575,489,580,67,15,81,578,577,579],"class_list":["post-681","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-breach-report","tag-aetna","tag-breach","tag-breach-report","tag-breaches","tag-california","tag-cellular","tag-ciso","tag-cloud","tag-computer-security","tag-computers","tag-cyber-security","tag-cybercrime","tag-cybersecurity","tag-dallas","tag-data-breach","tag-delaware","tag-executive","tag-florida","tag-healthcare","tag-healthinsurance","tag-kent-protect","tag-kentprotect","tag-montana","tag-nationsbenefits","tag-newhampshire","tag-plantation","tag-pwned","tag-summary","tag-texas","tag-thirdparty","tag-vendor","tag-vermont"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Breach Report: NationsBenefits Fortra breach affects Aetna and 15,000+ consumers - Kent Protect<\/title>\n<meta name=\"description\" content=\"NationsBenefits was breached by the Clop ransomware group in the early 2023 Fortra breach campaign, affecting over 15,000+ consumers and potentially Aetna customers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Breach Report: NationsBenefits Fortra breach affects Aetna and 15,000+ consumers - Kent Protect\" \/>\n<meta property=\"og:description\" content=\"NationsBenefits was breached by the Clop ransomware group in the early 2023 Fortra breach campaign, affecting over 15,000+ consumers and potentially Aetna customers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/\" \/>\n<meta property=\"og:site_name\" content=\"Kent Protect\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-03T10:53:02+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-04T20:00:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/NationsBenefits-logo-horiz-c.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"627\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Kyler Kent CISSP\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kyler Kent CISSP\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/\"},\"author\":{\"name\":\"Kyler Kent CISSP\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\"},\"headline\":\"Breach Report: NationsBenefits Fortra breach affects Aetna and 15,000+ consumers\",\"datePublished\":\"2023-05-03T10:53:02+00:00\",\"dateModified\":\"2023-05-04T20:00:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/\"},\"wordCount\":515,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/NationsBenefits-logo-horiz-c.jpg\",\"keywords\":[\"aetna\",\"breach\",\"breach report\",\"breaches\",\"california\",\"cellular\",\"ciso\",\"cloud\",\"computer security\",\"computers\",\"cyber security\",\"cybercrime\",\"cybersecurity\",\"dallas\",\"data breach\",\"delaware\",\"executive\",\"Florida\",\"healthcare\",\"healthinsurance\",\"kent protect\",\"kentprotect\",\"Montana\",\"nationsbenefits\",\"newhampshire\",\"plantation\",\"pwned\",\"summary\",\"texas\",\"thirdparty\",\"vendor\",\"vermont\"],\"articleSection\":[\"The Breach Report!\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/\",\"name\":\"Breach Report: NationsBenefits Fortra breach affects Aetna and 15,000+ consumers - Kent Protect\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/NationsBenefits-logo-horiz-c.jpg\",\"datePublished\":\"2023-05-03T10:53:02+00:00\",\"dateModified\":\"2023-05-04T20:00:28+00:00\",\"description\":\"NationsBenefits was breached by the Clop ransomware group in the early 2023 Fortra breach campaign, affecting over 15,000+ consumers and potentially Aetna customers.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/NationsBenefits-logo-horiz-c.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/NationsBenefits-logo-horiz-c.jpg\",\"width\":1200,\"height\":627,\"caption\":\"NationsBenefits logo (image source: NationsBenefits (businesswire), n.d.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/03\\\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kentprotect.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Breach Report: NationsBenefits Fortra breach affects Aetna and 15,000+ consumers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"name\":\"Kent Protect\",\"description\":\"Starring the Breach Report! and other security and cybersecurity series\",\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kentprotect.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\",\"name\":\"Kent Protect\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"width\":209,\"height\":161,\"caption\":\"Kent Protect\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\",\"name\":\"Kyler Kent CISSP\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"caption\":\"Kyler Kent CISSP\"},\"description\":\"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \\\"SOC Analyst Career Guide\\\" (ISBN-13: 9781835467466). https:\\\/\\\/linktr.ee\\\/kentprotect.com Corrections: corrections@kentprotect.com\",\"sameAs\":[\"http:\\\/\\\/kylerkent.com\"],\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/author\\\/kylerkent\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Breach Report: NationsBenefits Fortra breach affects Aetna and 15,000+ consumers - Kent Protect","description":"NationsBenefits was breached by the Clop ransomware group in the early 2023 Fortra breach campaign, affecting over 15,000+ consumers and potentially Aetna customers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/","og_locale":"en_US","og_type":"article","og_title":"Breach Report: NationsBenefits Fortra breach affects Aetna and 15,000+ consumers - Kent Protect","og_description":"NationsBenefits was breached by the Clop ransomware group in the early 2023 Fortra breach campaign, affecting over 15,000+ consumers and potentially Aetna customers.","og_url":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/","og_site_name":"Kent Protect","article_published_time":"2023-05-03T10:53:02+00:00","article_modified_time":"2023-05-04T20:00:28+00:00","og_image":[{"width":1200,"height":627,"url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/NationsBenefits-logo-horiz-c.jpg","type":"image\/jpeg"}],"author":"Kyler Kent CISSP","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kyler Kent CISSP","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/#article","isPartOf":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/"},"author":{"name":"Kyler Kent CISSP","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116"},"headline":"Breach Report: NationsBenefits Fortra breach affects Aetna and 15,000+ consumers","datePublished":"2023-05-03T10:53:02+00:00","dateModified":"2023-05-04T20:00:28+00:00","mainEntityOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/"},"wordCount":515,"commentCount":0,"publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/NationsBenefits-logo-horiz-c.jpg","keywords":["aetna","breach","breach report","breaches","california","cellular","ciso","cloud","computer security","computers","cyber security","cybercrime","cybersecurity","dallas","data breach","delaware","executive","Florida","healthcare","healthinsurance","kent protect","kentprotect","Montana","nationsbenefits","newhampshire","plantation","pwned","summary","texas","thirdparty","vendor","vermont"],"articleSection":["The Breach Report!"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/","url":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/","name":"Breach Report: NationsBenefits Fortra breach affects Aetna and 15,000+ consumers - Kent Protect","isPartOf":{"@id":"https:\/\/kentprotect.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/#primaryimage"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/NationsBenefits-logo-horiz-c.jpg","datePublished":"2023-05-03T10:53:02+00:00","dateModified":"2023-05-04T20:00:28+00:00","description":"NationsBenefits was breached by the Clop ransomware group in the early 2023 Fortra breach campaign, affecting over 15,000+ consumers and potentially Aetna customers.","breadcrumb":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/#primaryimage","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/NationsBenefits-logo-horiz-c.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/NationsBenefits-logo-horiz-c.jpg","width":1200,"height":627,"caption":"NationsBenefits logo (image source: NationsBenefits (businesswire), n.d."},{"@type":"BreadcrumbList","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kentprotect.com\/"},{"@type":"ListItem","position":2,"name":"Breach Report: NationsBenefits Fortra breach affects Aetna and 15,000+ consumers"}]},{"@type":"WebSite","@id":"https:\/\/kentprotect.com\/#website","url":"https:\/\/kentprotect.com\/","name":"Kent Protect","description":"Starring the Breach Report! and other security and cybersecurity series","publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kentprotect.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kentprotect.com\/#organization","name":"Kent Protect","url":"https:\/\/kentprotect.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","width":209,"height":161,"caption":"Kent Protect"},"image":{"@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116","name":"Kyler Kent CISSP","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","caption":"Kyler Kent CISSP"},"description":"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \"SOC Analyst Career Guide\" (ISBN-13: 9781835467466). https:\/\/linktr.ee\/kentprotect.com Corrections: corrections@kentprotect.com","sameAs":["http:\/\/kylerkent.com"],"url":"https:\/\/kentprotect.com\/index.php\/author\/kylerkent\/"}]}},"_links":{"self":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/681","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/comments?post=681"}],"version-history":[{"count":5,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/681\/revisions"}],"predecessor-version":[{"id":718,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/681\/revisions\/718"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media\/682"}],"wp:attachment":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media?parent=681"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/categories?post=681"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/tags?post=681"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}