Connexure Details

Connexure

Atlanta, Georgia • employees • Technology

United States

Industry

Technology

Security Incidents

Connexure, originally founded as Young Consulting by David Young in 1995, specializes in developing software solutions for the insurance industry. The company initially focused on helping insurance carriers manage their books of business but has since evolved. Today, Connexure provides comprehensive services to the self-funded medical benefits ecosystem, including stop loss carriers, brokers, and third-party administrators. The company's software aids in quoting, underwriting, and administering stop loss policies, aiming to streamline and integrate various processes through advanced technology...
Show more

Security Incidents

Connexure Breach of Apr 2024

Severity Score

High

Type

Ransomware Attack

Summary

Young Consulting, now known as Connexure, experienced a data breach initiated by the BlackSuit ransomware group on April 10, 2024. The breach was detected on April 13, which led to the company taking systems offline to investigate with the help of a cybersecurity forensics firm. The attackers accessed the network for a few days and exfiltrated files containing sensitive personal information, including names, dates of birth, Social Security numbers, and insurance-related details.

The compromised data affected over 950,000 individuals, many of whom are linked to Blue Shield of California. Young...
Show more

Severity

In April 2024, Connexure experienced a severe cyber incident orchestrated by the BlackSuit ransomware group. The attack resulted in the exfiltration of sensitive personal information, including names, dates of birth, Social Security numbers, and insurance-related details, affecting over 950,000 individuals primarily connected to Blue Shield of California. The stolen data was subsequently leaked on the dark web, and Connexure's systems were encrypted, severely hampering their recovery efforts.

Despite immediate actions to bring systems offline and enlist cybersecurity forensic support, the ful...
Show more

Impact

In April 2024, Connexure (formerly known as Young Consulting) faced a significant cyber incident attributed to the BlackSuit ransomware group. This event was classified as both a data breach and a ransomware attack. During the breach, attackers accessed the network and exfiltrated sensitive personal information—names, dates of birth, Social Security numbers, and insurance-related details—impacting over 950,000 individuals, primarily those associated with Blue Shield of California.

In response, Connexure brought systems offline to analyze the breach with the assistance of a cybersecurity foren...
Show more