HackingSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
The Northwestern Mutual Life Insurance Company
bd_0dd7d6044a8af60d · schema v1 · pii pii-v1
Full breach record for The Northwestern Mutual Life Insurance Company →Northwestern Mutual notified customers of a cybersecurity incident at its service provider, Infosys McCamish Systems (IMS), on or around November 2, 2023. An unauthorized party gained access to IMS systems. IMS disabled systems, retained forensic and e-discovery firms, and restored services with enhanced controls. No evidence of continued access was found. Northwestern Mutual's internal systems were not compromised. Identity monitoring services were offered to affected individuals.
This filing is one of 14 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_3c2a297f228ab470Montana State AGfiled 2024-02-29Verified
- bd_604c26d3099e3fe9Maine State AGfiled 2024-02-29Verified
- bd_decee521c248d27dWashington State AGfiled 2024-02-29Verified
- bd_f32704b1d1b017c1Oregon State AGfiled 2024-02-29Verified
Show 6 more filings ↓Show fewer ↑up to 13d gap
- bd_7f405322cd8b7cd6Indiana State AGfiled 2024-03-01(1d gap)Verified
- bd_c86992b6fc6b6a8cNew Hampshire State AGfiled 2024-03-08(8d gap)Verified
- bd_2f40c7ba9b1e8a51Indiana State AGfiled 2024-02-16(13d gap)Verified
- bd_569adbdb9e453b18Maine State AGfiled 2024-02-16(13d gap)Verified
- bd_9247d9734b1c370eCalifornia State AGfiled 2024-02-16(13d gap)Verified
- bd_fa687827ad46b0a5Montana State AGfiled 2024-02-16(13d gap)Verified
Showing first 10 of 13 linked disclosures.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-581699
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 29, 2024
- Raw hash
- a6d9c36b452b9d2595aa4ec583f433aa3a10ba4eefba0ba28346186a7153cbe1
Reporting entity
- Name
- The Northwestern Mutual Life Insurance Companynorm: the northwestern mutual life insurance
- Domain
- northwesternmutual.com
Victim entity
- Name
- The Northwestern Mutual Life Insurance Companynorm: the northwestern mutual life insurance
- Domain
- northwesternmutual.com
Incident
- Discovered
- Nov 2, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Third party
- via Infosys McCamish Systems LLC
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.