HackingFinancial ServicesFinanceLow
Mutual of America Life Insurance Co.
bd_1b8a78c48dfae39f · schema v1 · pii pii-v1
Full breach record for Mutual of America Life Insurance Co. →Mutual of America Life Insurance Co. reported an external system breach (hacking) to the Maine AG. The incident occurred on 11/14/2025 and was discovered on 02/23/2026. Written notifications to affected consumers were sent on 03/23/2026. The total number of affected persons and Maine residents was not disclosed in the public-facing AG entry. Specific data types acquired were not enumerated in the AG submission form (the underlying notice letter PDF was not parsed). Experian credit monitoring and identity restoration services were offered for 12 months.
Maine clockDiscovered Feb 23, 2026 → Filed with AG Mar 23, 202628d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dff707b6-928a-407d-ac5b-039c8547bb16.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 23, 2026
- Raw hash
- 9816b04f073dec9335b700c9a353450dd9c9f8197d6c360529c23f196e0e535b
Reporting entity
- Name
- Mutual of America Life Insurance Co.norm: mutual of america life insurance
- Domain
- mutualofamerica.com
- Industry
- Financial Services
Victim entity
- Name
- Mutual of America Life Insurance Co.norm: mutual of america life insurance
- Domain
- mutualofamerica.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Feb 23, 2026
- Materiality determined
- —
- Notification sent
- Mar 23, 2026
- Affected individuals
- Not disclosed
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 23, 2026→ Filed with AG: Mar 23, 202628d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.