HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained

Loyal American Life Insurance Company

bd_0612728846b6db03 · schema v1 · pii pii-v1

Full breach record for Loyal American Life Insurance Company →

Loyal American Life Insurance Company notified the California AG of a data breach affecting some policyholder information. The incident resulted from a vulnerability in Progress Software's MOVEit Transfer product, exploited by an unauthorized third party on May 29-30, 2023. Data downloaded included names and other elements. The company patched servers, investigated, and is offering 24 months of credit monitoring via Kroll.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_8b00c0897275a137Maine State AGfiled 2023-08-30Candidate

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-572613
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 30, 2023
Raw hash: 2f610a05ceeceb751730170a5b07ccb1b54c0bdaa7853abae7ba1142febd0294

Reporting entity

Name: Loyal American Life Insurance Company
norm: loyal american life insurance

Victim entity

Name: Loyal American Life Insurance Company
norm: loyal american life insurance

Incident

Discovered: May 31, 2023
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASIC
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
Threat actor: External
Third party: via Progress Software
Initial access: supply_chain

Compliance

Time to disclose: 13 weeks(91 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.