HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
LifePlans Financial & Insurance Services, Inc.
bd_107a98e4d1f1c487 · schema v1 · pii pii-v1
Full breach record for LifePlans Financial & Insurance Services, Inc. →LifePlans Financial & Insurance Services, Inc. experienced a security incident on April 21, 2022, involving unauthorized access to an employee's email account. The account contained emails or attachments with customer personal information, including names, addresses, dates of birth, driver's license numbers, financial account numbers, and Social Security numbers. The company secured the account, launched an investigation, enhanced security protocols, re-educated staff, and offered one year of identity monitoring through Kroll.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_1b7df9a7af9935ecMontana State AGfiled 2022-10-12Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-558183
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 12, 2022
- Raw hash
- b1a97fa57001b3b28bcd5f89d1fc9b88ad10d4159ed04b03a2da414c857ee4f7
Reporting entity
- Name
- LifePlans Financial & Insurance Services, Inc.norm: lifeplans financial insurance
Victim entity
- Name
- LifePlans Financial & Insurance Services, Inc.norm: lifeplans financial insurance
Incident
- Discovered
- Apr 21, 2022
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 weeks(174 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.