About Genex Services, LLC
Genex Services, LLC is a managed care service provider that works with insurance companies, employers, and third-party administrators. The company experienced a data breach affecting 4,396 individuals, including 14 residents of Maine. The breach occurred between January 22, 2025, and February 27, 2025, and was discovered on February 25, 2025. The incident involved unauthorized access to personal information due to a phishing attack.
What Happened
On February 25, 2025, Genex became aware of suspicious activity on certain portions of its network. In response, we immediately took measures to secure our network, systems, and data. We also activated our incident response plan, notified the Federal Bureau of Investigation, and began a thorough investigation with the assistance of third-party cybersecurity experts to determine what happened and the scope of the incident.
The breach involved a phishing attack that compromised the laptops of two employees, allowing unauthorized access to certain files containing personal information. The breach was discovered on February 25, 2025, affecting individuals whose information was stored in those files.
Next Steps
Affected individuals should remain vigilant by reviewing their account statements and credit reports closely. If any suspicious activity is detected, it should be reported to the relevant financial institution or company immediately. Additionally, individuals should consider placing fraud alerts or security freezes on their credit reports to prevent unauthorized access.
Identity Theft Protection Services
Genex has partnered with Kroll to offer 24 months of complimentary identity monitoring services to affected individuals. These services include single bureau credit monitoring, fraud consultation, and identity theft restoration. Affected individuals are encouraged to activate these services by visiting the provided enrollment website and using the membership number included in their notification letter.