/

Keenan Data Breach: What & How It Happened?

Keenan Data Breach: What & How It Happened?

Twingate Team

Jun 14, 2024

Keenan & Associates, an insurance broker, experienced a data breach in August 2023. The incident involved disruptions on their network servers and unauthorized access to internal systems. Personal information, such as names, Social Security numbers, and health information, may have been affected, but there is no evidence of misuse at this time. Keenan has since implemented additional security measures and notified affected clients and individuals. The company is also facing a class-action lawsuit alleging insufficient cybersecurity measures and slow disclosure of the breach.

How many accounts were compromised?

The breach impacted data related to more than 1.5 million individuals.

What data was leaked?

The data exposed in the breach included names, dates of birth, Social Security numbers, driver's license numbers, passport numbers, health insurance information, and general health information.

How was Keenan hacked?

During the cyberattack on Keenan & Associates, unauthorized parties gained access to the company's internal systems and exfiltrated personal data between August 21 and August 27, 2023. The breach was discovered and contained within hours after disruptions on Keenan's servers were detected. Specific methods used by the hackers remain unclear.

Keenan's solution

In response to the data breach, Keenan & Associates took several measures to secure its platform and prevent future hacking incidents. This included implementing additional security protocols to enhance the security of their network, internal systems, and applications. Keenan also immediately launched an investigation, engaged third-party cybersecurity experts, contained the incident, and notified the FBI. They are notifying affected clients and individuals and providing them with information and resources to protect their personal information. Furthermore, Keenan has strengthened the security of its network to prevent similar incidents from occurring in the future.

How do I know if I was affected?

Keenan & Associates has notified clients and individuals believed to be affected by the breach. If you're a client of Keenan and haven't received a notification, you may visit HaveIBeenPwned to check your credentials.

What should affected users do?

In general, affected users should:

  • Change Your Passwords: Immediately update your passwords for all accounts that may have been affected. Make sure the new passwords are strong and unique, not previously used on any other platform.

  • Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

  • Enable Two-Factor Authentication (2FA): Activate 2FA on your accounts whenever possible. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

  • Monitor Your Accounts: Keep an eye on your accounts for any suspicious activity. If you notice anything unusual, report it to the appropriate authorities and take necessary actions to secure your accounts.

For more specific help and instructions related to Keenan's data breach, please contact Keenan's support directly.

Where can I go to learn more?

If you want to find more information on the Keenan data breach, check out the following news articles:

Rapidly implement a modern Zero Trust network that is more secure and maintainable than VPNs.

/

Keenan Data Breach: What & How It Happened?

Keenan Data Breach: What & How It Happened?

Twingate Team

Jun 14, 2024

Keenan & Associates, an insurance broker, experienced a data breach in August 2023. The incident involved disruptions on their network servers and unauthorized access to internal systems. Personal information, such as names, Social Security numbers, and health information, may have been affected, but there is no evidence of misuse at this time. Keenan has since implemented additional security measures and notified affected clients and individuals. The company is also facing a class-action lawsuit alleging insufficient cybersecurity measures and slow disclosure of the breach.

How many accounts were compromised?

The breach impacted data related to more than 1.5 million individuals.

What data was leaked?

The data exposed in the breach included names, dates of birth, Social Security numbers, driver's license numbers, passport numbers, health insurance information, and general health information.

How was Keenan hacked?

During the cyberattack on Keenan & Associates, unauthorized parties gained access to the company's internal systems and exfiltrated personal data between August 21 and August 27, 2023. The breach was discovered and contained within hours after disruptions on Keenan's servers were detected. Specific methods used by the hackers remain unclear.

Keenan's solution

In response to the data breach, Keenan & Associates took several measures to secure its platform and prevent future hacking incidents. This included implementing additional security protocols to enhance the security of their network, internal systems, and applications. Keenan also immediately launched an investigation, engaged third-party cybersecurity experts, contained the incident, and notified the FBI. They are notifying affected clients and individuals and providing them with information and resources to protect their personal information. Furthermore, Keenan has strengthened the security of its network to prevent similar incidents from occurring in the future.

How do I know if I was affected?

Keenan & Associates has notified clients and individuals believed to be affected by the breach. If you're a client of Keenan and haven't received a notification, you may visit HaveIBeenPwned to check your credentials.

What should affected users do?

In general, affected users should:

  • Change Your Passwords: Immediately update your passwords for all accounts that may have been affected. Make sure the new passwords are strong and unique, not previously used on any other platform.

  • Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

  • Enable Two-Factor Authentication (2FA): Activate 2FA on your accounts whenever possible. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

  • Monitor Your Accounts: Keep an eye on your accounts for any suspicious activity. If you notice anything unusual, report it to the appropriate authorities and take necessary actions to secure your accounts.

For more specific help and instructions related to Keenan's data breach, please contact Keenan's support directly.

Where can I go to learn more?

If you want to find more information on the Keenan data breach, check out the following news articles:

Rapidly implement a modern Zero Trust network that is more secure and maintainable than VPNs.

Keenan Data Breach: What & How It Happened?

Twingate Team

Jun 14, 2024

Keenan & Associates, an insurance broker, experienced a data breach in August 2023. The incident involved disruptions on their network servers and unauthorized access to internal systems. Personal information, such as names, Social Security numbers, and health information, may have been affected, but there is no evidence of misuse at this time. Keenan has since implemented additional security measures and notified affected clients and individuals. The company is also facing a class-action lawsuit alleging insufficient cybersecurity measures and slow disclosure of the breach.

How many accounts were compromised?

The breach impacted data related to more than 1.5 million individuals.

What data was leaked?

The data exposed in the breach included names, dates of birth, Social Security numbers, driver's license numbers, passport numbers, health insurance information, and general health information.

How was Keenan hacked?

During the cyberattack on Keenan & Associates, unauthorized parties gained access to the company's internal systems and exfiltrated personal data between August 21 and August 27, 2023. The breach was discovered and contained within hours after disruptions on Keenan's servers were detected. Specific methods used by the hackers remain unclear.

Keenan's solution

In response to the data breach, Keenan & Associates took several measures to secure its platform and prevent future hacking incidents. This included implementing additional security protocols to enhance the security of their network, internal systems, and applications. Keenan also immediately launched an investigation, engaged third-party cybersecurity experts, contained the incident, and notified the FBI. They are notifying affected clients and individuals and providing them with information and resources to protect their personal information. Furthermore, Keenan has strengthened the security of its network to prevent similar incidents from occurring in the future.

How do I know if I was affected?

Keenan & Associates has notified clients and individuals believed to be affected by the breach. If you're a client of Keenan and haven't received a notification, you may visit HaveIBeenPwned to check your credentials.

What should affected users do?

In general, affected users should:

  • Change Your Passwords: Immediately update your passwords for all accounts that may have been affected. Make sure the new passwords are strong and unique, not previously used on any other platform.

  • Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

  • Enable Two-Factor Authentication (2FA): Activate 2FA on your accounts whenever possible. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

  • Monitor Your Accounts: Keep an eye on your accounts for any suspicious activity. If you notice anything unusual, report it to the appropriate authorities and take necessary actions to secure your accounts.

For more specific help and instructions related to Keenan's data breach, please contact Keenan's support directly.

Where can I go to learn more?

If you want to find more information on the Keenan data breach, check out the following news articles: