HackingProfessional ServicesFinancial ServicesProfessional ServicesCapture Stored DataExtortion DemandData ExfiltratedRansom DemandedRansom PaidCustomer Data InvolvedDelayed DiscoveryPIILowContained
Horizon Actuarial
bd_0137fc9d43a66d3d · schema v1 · pii pii-v1
Full breach record for Horizon Actuarial →On November 10-11, 2021, two servers of Horizon Actuarial Services, LLC were accessed without authorization. On November 12, 2021, Horizon Actuarial received an extortion email claiming data theft. The company engaged third-party specialists, notified the FBI, and paid the threat actor. Affected individuals were benefit plan participants; PII was potentially exposed. Identity monitoring via Kroll was offered.
California clockDiscovered Nov 12, 2021 → Notified Jan 13, 202262d ✗ CA 60-day late19 weeks discovery → filing
This filing is one of 20 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_5111b6c88c94f7aaIdaho State AGfiled 2022-03-25Candidate
- bd_3f0edaeb78405833Maine State AGfiled 2022-03-22(3d gap)Verified
- bd_53f26450ae728dacMaine State AGfiled 2022-03-22(3d gap)Verified
- bd_5c05f2edbfa8a93fMaine State AGfiled 2022-03-22(3d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 60d gap
- bd_3529f9df1be2849bMaine State AGfiled 2022-04-11(17d gap)Verified
- bd_ff25b9191ff88ab5Idaho State AGfiled 2022-04-11(17d gap)Verified
- bd_aebae786303bb6acMaine State AGfiled 2022-04-15(21d gap)Verified
- bd_570c80b01bbe9116Maine State AGfiled 2022-04-26(32d gap)Verified
- bd_68e3218b8c9d431dMaine State AGfiled 2022-05-10(46d gap)Verified
- bd_63ec2cad1130c87cMaine State AGfiled 2022-05-24(60d gap)Verified
Showing first 10 of 19 linked disclosures.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-552016
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2022
- Raw hash
- e5cb8b10f9110194631d20ea58188283f5a66835ea94d38a80798f07c7700915
Reporting entity
- Name
- Horizon Actuarialnorm: horizon actuarial
- Domain
- horizonactuarial.com
Victim entity
- Name
- Horizon Actuarialnorm: horizon actuarial
- Domain
- horizonactuarial.com
- Industry
- Professional ServicesllmFinancial Servicesllm
Incident
- Discovered
- Nov 12, 2021
- Materiality determined
- —
- Notification sent
- Jan 13, 2022
- Affected individuals
- Not disclosed
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 ChannelT1657 Financial Theft
- Threat actor
- ExternalFinancial
- Regulator citations
- Provided notice to the FBI
Compliance
- Time to disclose
- 19 weeks(133 days from discovery to filing)
- Compliance flags
- CA 60-day late · 62d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 12, 2021→ Notified: Jan 13, 202262d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.