Numotion data breach: employee email accounts accessed from September to November 2024

What happened in the Numotion email incident?

The letter describes unauthorized access to employee email, repeated over about eleven weeks. It says there is no indication that any information has been used for fraud or identity theft, and that Numotion reviewed the emails that may have been accessed.

Date	Event	Where it comes from
September 2, 2024	First unauthorized access to the email accounts	Letter; California and Washington records
November 18, 2024	Last unauthorized access	Letter; California and Washington records
January 22, 2025	Review finds personal information in the accounts	Letter
March 7, 2025	Notice reported to California and Washington	California and Washington records

The letter does not say when Numotion found the intrusion. From the last access to the review's finding took 65 days, and from that finding to the notice another 44. The guide to notice delays compares gaps like this across the log.

How many people were affected by the Numotion data breach?

Neither the letter nor the California record gives a total. Washington counts 22,854 of its residents. No national figure appears in the documents fetched for this entry.

What information was involved?

Each letter pairs the reader's name with its own list of data elements, and the filed copy leaves that list blank. For its residents, Washington's attorney general lists names, Social Security numbers, full dates of birth, health insurance policy or ID numbers and medical information. Not every reader necessarily had every type involved.

What is Numotion offering?

Item	Detail from the letter
Service	Experian IdentityWorks Credit 3B (three-bureau credit monitoring, identity restoration, up to $1 million identity theft insurance)
Length	Printed on each letter; blank in the filed copy
Enrollment	experianidworks.com/3bcredit with the activation code on the letter, before the deadline printed on it
Experian help	877-288-8057, with the engagement number on the letter
Numotion help line	8 a.m. to 5:30 p.m. Central, Monday to Friday; the number is printed on each letter

The letter also recommends reviewing account statements and credit reports, and explains fraud alerts and free security freezes. The guide to credit monitoring offers compares this offer with others in the log.

Has Numotion had other data breaches?

Yes. Two other Numotion notices appear on state lists, separate from the email incident:

Notice	Recorded by	Dates on the record	People counted
2024 notice	Washington, reported May 1, 2024	Breach date April 29, 2024	35,143 Washington residents
2024 email accounts (this entry)	Washington and California, reported March 7, 2025	Access September 2 to November 18, 2024	22,854 Washington residents
2026 notice	Indiana, notice sent May 22, 2026	Breach February 1, 2026	1,399 in total, 24 in Indiana

Washington's record for the April 2024 breach lists names, Social Security numbers, driver's license or ID numbers, dates of birth, health insurance numbers and medical information. The state records do not say how the April 2024 breach or the 2026 breach happened. A person who received a Numotion letter can match its date to one of the three rows. The guide to healthcare provider breach notices explains what these letters usually contain.

What the documents leave open

• How many people the email incident reached in total, and which data elements each person had in the accounts.
• How the accounts were accessed, and when Numotion first noticed.
• Whether the 2026 breach on Indiana's list involved the same systems.