Decisely Insurance Services, a Georgia-based company, experienced a data security incident in the past year that resulted in the compromise of sensitive personal and financial information of over 110,000 individuals nationwide. The breach exposed highly confidential data, including financial records, which poses significant risks such as identity theft, financial fraud, and reputational damage to the affected individuals. The scale of the incident—impacting a large number of people across the U.S.—highlights severe operational and compliance failures within the company’s cybersecurity framework. The exposure of such critical data not only undermines trust in Decisely’s ability to safeguard customer information but also subjects the company to potential legal liabilities, regulatory fines, and long-term reputational harm. The breach’s broad reach and the nature of the leaked data classify it as a high-severity incident with far-reaching consequences for both the company and its customers.

Decisely Insurance Services, a tech-driven platform aiding small businesses in HR, benefits, and administrative tasks, experienced a data breach discovered on December 17, 2024. Unauthorized access to its cloud storage was traced to December 16, 2024, with confirmation on May 29, 2025 that the breach exposed sensitive personal data tied to its partner, MetLife. Compromised information includes names, dates of birth, addresses, phone numbers, Social Security numbers, email addresses, passport numbers, bank account details, and digital signatures—affecting an estimated 113,984 individuals. The breach poses severe risks of identity theft, financial fraud, and reputational harm, prompting a class-action investigation by Edelson Lechtzin LLP to seek legal remedies for victims. Decisely secured its network post-discovery but failed to prevent the large-scale exposure of highly sensitive data, including financial and personally identifiable information (PII). Affected individuals are advised to monitor credit reports and account statements for suspicious activity, highlighting the breach’s potential for long-term financial and privacy repercussions.