Salus Group Data Breach Details
The incident came to light when suspicious activity was detected in an employee’s email account. Immediate action was taken to disable the compromised account, reset the password, and initiate a thorough investigation with the help of a third-party forensic firm. The investigation determined that unauthorized access took place on October 9, 2024. However, the investigation was unable to pinpoint which specific emails, if any, had been accessed by the unauthorized party.
As a precautionary measure, a comprehensive review of the affected email account was conducted. This included identifying personal information contained in emails and attachments, cataloging the data, and understanding the relationship with each affected individual. The affected data varied but typically included sensitive information such as names, dates of birth, Social Security numbers and clinical or treatment records.
As part of their response, Salus Group is offering complimentary credit monitoring and identity protection services through Kroll. Individuals who have been impacted will receive further instructions on how to activate these services, which are being provided at no charge.
It’s important to note that not all clients of Salus Group were impacted. The breach only affected individuals whose data was found in the compromised email account. After completing their analysis in late February 2025, Salus Group began notifying affected individuals and relevant employers or insurance carriers on or around March 27, 2025.
What Information Was Exposed?
The affected data varied but typically included sensitive information such as:
- Names
- dates of birth
- Social Security numbers
- drivers’ license numbers
- financial details
- health insurance information
- clinical or treatment records.
