HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)CredentialsLowContained

NEW YORK LIFE INSURANCE COMPANY

bd_1f3702699b24bfd9 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 3, 2024

To disclose

—

Affected

2state residents only

Linked

3 filings

Confidence

66%

Full breach record for NEW YORK LIFE INSURANCE COMPANY →26 incidents on file

New York Life Insurance Company notified Montana residents that unauthorized parties obtained valid usernames and passwords to access online accounts. Compromised data included names, addresses, emails, and phone numbers. The company disabled accounts, implemented additional verification protocols, and provided one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jul 3, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_78acbc4c4f5723a12024-06-28 · +5dVerified
Massachusetts State AGbd_fe73c27eabf9ede92024-06-28 · +5dVerified

Name: NEW YORK LIFE INSURANCE COMPANY
norm: new york life insurance
Domain: newyorklife.com

Name: NEW YORK LIFE INSURANCE COMPANY
norm: new york life insurance
Domain: newyorklife.com
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Jun 27, 2024
Affected individuals: 2state-resident count only
Data types: Identity (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Disabled your online account
Flagged your policy number in our system so that additional verification protocols will be utilized
Pay for one year of credit monitoring services for you via the Equifax Credit WatchTM Gold Service
Changes made: Employing measures to prevent unauthorized access to your records
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJun 28 · first

Massachusetts State AGJun 28 · first

Montana State AG+5d · this page

Pattern: first filing Jun 28 (IN), last Jul 3 (MT) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1511.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 3, 2024
Raw hash: 8e4efaf40743bbe2a982f7db827c5627d1018709fc4cd2e4439b0e2bdd8a34a8

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityNEW YORK LIFE INSURANCE COMPANY

Victim entityNEW YORK LIFE INSURANCE COMPANY

IncidentUnauthorized Access

Stated responseDisabled your online account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov