Insurance coverage firm Globe Life is notifying 850,000 people of a data breach that may have concerned their private, well being, and insurance coverage info.
The data breach, Globe Life advised the Securities and Change Fee in October 2024, was found after a menace actor tried to extort the corporate, demanding a ransom cost in trade for not publishing stolen info.
The compromised information, the corporate says, belongs to prospects and buyer leads, and was possible exfiltrated from its subsidiary American Earnings Life Insurance coverage Firm.
Based on Globe Life, the compromised info contains names, addresses, dates of delivery, Social Safety numbers, electronic mail addresses, telephone numbers, well being info, and insurance coverage coverage info.
The insurer stated on the time that roughly 5,000 folks may need been affected, and that no bank card information, banking info, and different monetary info was compromised.
In a January 30 submitting with the SEC, the corporate revealed that the compromised information was “traced to particular databases maintained by a small variety of impartial company house owners”, and that it couldn’t verify whether or not the menace actor stole the knowledge of different people.
Nevertheless, it determined to inform roughly 850,000 extra people of the incident, as their private info was additionally saved within the compromised databases, underlining that it “has not been capable of verify if the menace actor acquired these extra people’ information”.
Globe Life advised the SEC that it might be offering all the doubtless impacted people with free credit score monitoring providers.
“The corporate has confirmed the extortion makes an attempt didn’t contain the usage of ransomware or lead to any interruption to the corporate’s techniques, providers, or enterprise operations. The Firm continues to speak with regulatory authorities and regulation enforcement,” Globe Life stated.
The insurer will search reimbursement for the prices related to the incident, from its insurers, and believes that the data breach has not had nor would have a fabric influence on its monetary situation or outcomes of operations.
Globe Life didn’t say when or how the data breach occurred, nor who could be answerable for it, and it’s unclear whether or not the extortion try was associated to the data breach the corporate was investigating in June final 12 months.
information.killnetswitch has contacted the corporate for extra info and can replace this text if it responds.
