Benefitelect Data Breach Lawsuit Investigation

Active investigation · Free, confidential case review
Call (954) 799-5914
Data Breaches / Benefitelect
Active investigation Data breach · Benefits Administration Notices mailed Mar 23, 2026

Received a March 2026 breach notice from Benefitelect?

Dapeer Law, P.A. is investigating a potential class action against Coalesce, LLC dba Benefitelect, an Oregon-based benefits-administration and HR-technology provider, on behalf of individuals whose personal information may have been exposed in a March 2025 cyber incident.

Submit your claim See what to do No fee unless we recover for you
Breach window
Mar 30 to 31, 2025
Unauthorized network access and file exfiltration
Notification delay
About 12 months
Discovered Apr 2025, notices mailed Mar 2026
Credit monitoring
4,054
Individuals affected (state filings)
Eligibility

Who may qualify

You may be eligible to participate in a class action if any of the following applies:

  • You received a data breach notification letter from Benefitelect dated March 2026.
  • Your notice indicated that your Social Security number, health-insurance details, or limited medical or benefits-eligibility information may have been involved.
  • You had personal or benefits-related information held by Benefitelect in its role as a benefits-administration and HR-technology provider.
  • No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
  • Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.

Not sure if you qualify?

Send us your notice, we'll confirm your eligibility at no cost.

Check eligibility
Background

What happened

According to the notice filed with state regulators, Benefitelect detected suspicious activity within its computer environment on April 2, 2025. A forensic investigation assisted by third-party cybersecurity specialists determined that unauthorized actors accessed and exfiltrated certain files between March 30 and March 31, 2025.

A comprehensive file-by-file review later determined that the affected files contained personal and benefits-related information belonging to 4,054 individuals. Benefitelect began mailing notice letters dated March 23, 2026, nearly twelve months after the activity was first discovered. The notice does not mention any complimentary credit-monitoring services.

The company has reported that the compromised files may have contained names, addresses, dates of birth, Social Security numbers, health-insurance information, and limited medical or benefits-eligibility details. Because Social Security numbers and health information are reported to be involved, affected individuals may face an elevated risk of identity theft and medical-identity fraud. Benefitelect has stated that it is not aware of any actual or attempted misuse of the information.

Network Intrusion Data Exfiltration Social Security Numbers Health Information Vermont Attorney General
Action plan

What to do if you received a letter

1

Keep your notice letter

Do not discard it. Your letter documents that your information was involved and is important evidence if you decide to participate in a lawsuit.

2

Place a fraud alert and monitor your credit

Benefitelect's notice does not appear to offer complimentary credit monitoring, so consider acting on your own. You can request free annual credit reports at AnnualCreditReport.com, place a fraud alert or security freeze with Equifax, Experian, and TransUnion, and review your statements regularly. Taking these protective steps does not waive your right to pursue legal action.

3

Place a fraud alert or credit freeze

Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. Because health-insurance and medical information may be involved, also watch for unfamiliar Explanation of Benefits letters or medical bills for care you did not receive.

4

Speak with a data breach attorney

Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options, and advise whether you may be eligible to join a class action.

Submit your notice for a free review

Two minutes online. A licensed attorney reviews every submission.

Submit your claim
Timeline

Breach timeline

Mar 30 to 31, 2025 Passed
Unauthorized access and file exfiltration from Benefitelect environment
Apr 2, 2025 Passed
Suspicious activity discovered
Early 2026 Passed
File-by-file review of affected data completed
Mar 23, 2026 Passed
Notice filed with state regulators, letters mailed to affected individuals
Pending Active
Potential class action filing
Statutes of limitations vary by state and legal theory, typically one to six years. Waiting can permanently bar your claim.
Possible recovery

Compensation you may be entitled to

Out-of-pocket expenses

Credit freezes, identity restoration services, and other costs incurred responding to the breach.

Time spent monitoring

Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.

Identity theft & fraud losses

Unreimbursed funds stolen from accounts, unauthorized credit lines, medical-identity theft, or tax refund fraud tied to the breach.

Statutory damages

Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.

Injunctive relief

Court orders requiring Benefitelect to implement stronger data-security practices going forward, so the same categories of personal and health information are better protected.

Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.

FAQ

Common questions

I received a data breach letter from Benefitelect. What should I do? +

Keep the letter you received, request your free annual credit reports at AnnualCreditReport.com, and consider placing a fraud alert or security freeze with Equifax, Experian, and TransUnion. Because health-insurance and medical information may be involved, also review your insurance statements and any Explanation of Benefits letters for activity you do not recognize, and consider speaking with a data breach attorney about your options.

Am I eligible to join a class action against Benefitelect? +

Eligibility generally requires that you received the March 23, 2026 Benefitelect notice or can otherwise confirm your information was involved. Your state of residence, the categories of data exposed, and any documented losses can all affect a potential claim. An attorney can review your situation at no cost.

How much money could I receive from a class action lawsuit? +

Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.

What personal information was exposed in the breach? +

The notice reports that affected files may have contained names, addresses, dates of birth, Social Security numbers, health-insurance information, and limited medical or benefits-eligibility details. The exact data varies by individual, so check your own letter for the specifics that apply to you.

Did Benefitelect offer free credit monitoring? +

Benefitelect's notice does not appear to offer complimentary credit-monitoring services. Affected individuals should consider monitoring their own credit, requesting free annual credit reports, and placing fraud alerts or security freezes with the three nationwide credit bureaus.

How many people were affected by the Benefitelect breach? +

State filings indicate that 4,054 individuals were affected, a figure reported in Texas regulator filings. This page will be updated if additional information is disclosed.

Is there a deadline to take legal action? +

Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.

How do I get a copy of the official breach notice? +

The breach notice was filed publicly with the Vermont Attorney General and can be downloaded from that office's website. Dapeer Law can also help you obtain a copy during a free consultation.

References

Sources & references

Attorney advertising. This page is provided for informational purposes only. It does not constitute legal advice or form an attorney-client relationship. Dapeer Law, P.A. is not affiliated with Coalesce, LLC dba Benefitelect, the credit bureaus, or any credit bureau. Prior results do not guarantee a similar outcome. All information regarding the data incident is drawn from the official notification filed with Vermont Attorney General on March 23, 2026.
Free, confidential case review

Don't let the deadline decide for you. Submit your claim today.

You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.

Why Dapeer Law

Practice focusConsumer class actions
Licensed inFL · NY · NJ · IL
Case review fee$0
Response timeSame business day
Free case review
Confidential · 2 minutes
Submit claim →
Previous
Previous

Fong, Ko & Associates Data Breach Lawsuit Investigation

Next
Next

Nickey Kehoe Data Breach Lawsuit Investigation