DisclosureLens
HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

ZURICH AMERICAN INSURANCE COMPANY

bd_1deb51181628c835 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 21, 2019

To disclose

—

Affected

Not disclosed

Confidence

66%
Full breach record for ZURICH AMERICAN INSURANCE COMPANY →4 incidents on file

Zurich American Insurance Company notified California residents that a vendor used for processing electronic claim-related payments was compromised between August and December 2018. Falsified account information was submitted to gain unauthorized access to certain claim payments. Affected individuals' names, medical information, and the last four digits of their Social Security numbers were accessed. Zurich retained CyberScout to provide one year of complimentary credit monitoring.

Incident timeline

Aug 1, 2018

Begins

Jan 21, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.