Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedPIIIdentity (basic)Financial accountMediumContained

UNUM GROUP

bd_03ce8a54335a0b77 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 23, 2021

Filed

Jan 28, 2022

To disclose

9 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

65%

Full breach record for UNUM GROUP →12 incidents on file

Unum Group notified Delaware residents of a cybersecurity incident where an unknown actor accessed a Unum employee's email account between October 28 and November 15, 2021. Unum discovered the access on November 23, 2021. The incident involved the impermissible access of employee email, potentially exposing customer personal information. Unum secured the account, enhanced security protocols, and provided 24 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 26 days

discovery → filing · 9 weeks / 66 days

Oct 28, 2021

Begins

Nov 23, 2021

Discovered

Jan 28, 2022

Filed

vs. sector median

+1 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit2bd_6b25e513214222d02022-02-19 · +22dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_86ad4c02605d0d4b2022-01-28Verified by operator
Oregon State AGbd_bb17019b8fea9cc02022-01-28Candidate
California State AGbd_ff9aff859f75440f2022-01-28Verified
Massachusetts State AGbd_22772d867e0203342022-01-31 · +3dVerified

Show 1 more filing ↓up to 3d gap

Washington State AGbd_707b54a4c14096ba2022-01-31 · +3dVerified

Name: UNUM GROUP
norm: unum group
Domain: plane.biz

Name: UNUM GROUP
norm: unum group
Domain: plane.biz
Industry: Financial Servicesllm

Discovered: Nov 23, 2021
Breach occurred: Oct 28, 2021 – Nov 15, 2021
Undetected for: 26 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 28, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Took measures to secure the account
Modifying our email login security processes
Evaluating any potential enhancements to our security protocols
Arranged for you to obtain, at no cost to you, 24 months of credit monitoring and other services from Experian
Changes made: Modifying our email login security processes
Evaluating any potential enhancements to our security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(66 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGJan 28 · first

Oregon State AGJan 28 · first

California State AGJan 28 · first

Delaware State AGJan 28 · first · this page

Massachusetts State AG+3d

Washington State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/02/Unum-Individual-Notification-Template.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 28, 2022
Raw hash: fafc6feec4a477b15f1c176ad3b4b9cad62ca24f75e65b7fb7cb6e0ee04e64c8

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityUNUM GROUP

Victim entityUNUM GROUP

Incidentdiscovered Nov 23, 2021

Stated responseTook measures to secure the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov