HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMediumContained
Transamerica, including Transamerica Life Insurance Company and Transamerica Retirement Solutions
bd_0a288787fc147935 · schema v1 · pii pii-v1
Full breach record for Transamerica, including Transamerica Life Insurance Company and Transamerica Retirement Solutions →Transamerica reported unauthorized access to retirement plan online account information between January and August 2017. Attackers used compromised third-party user credentials to log into Transamerica systems. Affected data included names, addresses, Social Security numbers, dates of birth, financial account information, and employment details. Transamerica engaged forensic investigators, contacted law enforcement, and offered one year of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-102679
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 13, 2017
- Raw hash
- 5df7fd642014f7711d1e2c6bb87add4d49214b246e29b6edc5e5a761d41fb24d
Reporting entity
- Name
- Transamerica, including Transamerica Life Insurance Company and Transamerica Retirement Solutionsnorm: transamerica including transamerica life insurance company and transamerica retirement
Victim entity
- Name
- Transamerica, including Transamerica Life Insurance Company and Transamerica Retirement Solutionsnorm: transamerica including transamerica life insurance company and transamerica retirement
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Contacted federal law enforcement
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.