Sun Life Assurance Company of Canada
bd_1c10b173511c6dd2 · schema v1 · pii pii-v1
Full breach record for Sun Life Assurance Company of Canada →Sun Life Assurance Company of Canada filed a supplemental notice with the New Hampshire Attorney General regarding a security breach involving its third-party vendor, Pension Benefit Information, LLC (PBI). The incident stemmed from the exploitation of a vulnerability in Progress Software's MOVEit Transfer software. Unauthorized access occurred on May 29-30, 2023, resulting in data exfiltration. The breach affected approximately 212,129 individuals nationwide, including 1,217 New Hampshire residents. Affected data included names and government identifiers. Sun Life and PBI notified affected individuals on or about September 15, 2023, offering credit monitoring services.
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/sun-life-insurance-company-canada-20231106.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 6, 2023
- Raw hash
- 5958d57d78f36c588a20c341466d548cf10a9c7a550e68ff086e21e956ba956a
Reporting entity
- Name
- Sun Life Assurance Company of Canadanorm: sun life assurance company of canada
Victim entity
- Name
- Sun Life Assurance Company of Canadanorm: sun life assurance company of canada
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Sep 15, 2023
- Affected individuals
- 212,129
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.