HackingStolen CredentialsTargetedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
THE HARTFORD INSURANCE GROUP, INC.
bd_1b6258a70340697e · schema v1 · pii pii-v1
Full breach record for THE HARTFORD INSURANCE GROUP, INC. →The Hartford Fire Insurance Company notified California AG of a data incident where unidentified actors used the company's public auto insurance quote application to submit fraudulent requests. Between December 2020 and February 2021, attackers may have accessed consumers' driver's license numbers. The company engaged investigators, removed the vulnerable field, enhanced safeguards, and reported to law enforcement. Affected individuals were offered 2 years of Experian IdentityWorks.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-538552
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 2, 2021
- Raw hash
- b45392237b005512d10ac6dfb2041fcdbc3da9d0013622d2219b32807ef16072
Reporting entity
- Name
- THE HARTFORD INSURANCE GROUP, INC.norm: the hartford insurance
Victim entity
- Name
- THE HARTFORD INSURANCE GROUP, INC.norm: the hartford insurance
Incident
- Discovered
- Jan 26, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported the fraudulent activity to law enforcement and regulatory authorities
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.