MisusePrivilege AbuseCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
State Farm Insurance Companies Employee Retirement Trust
bd_20aefc36d4915b0b · schema v1 · pii pii-v1
Full breach record for State Farm Insurance Companies Employee Retirement Trust →State Farm Insurance Companies reported a breach involving a former employee who inappropriately used customer information, including names, addresses, birthdates, credit card numbers, and SSNs. The incident was discovered on July 28, 2012, and involved activity occurring over approximately two months. State Farm cooperated with law enforcement and offered 12 months of credit monitoring via TransUnion to affected customers.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-32666
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2012
- Raw hash
- c963fd1569f489701f1383f906a5c845fa1f49e9292ca93ea27199513b0f979b
Reporting entity
- Name
- State Farm Insurance Companies Employee Retirement Trustnorm: state farm insurance companies employee retirement
Victim entity
- Name
- State Farm Insurance Companies Employee Retirement Trustnorm: state farm insurance companies employee retirement
Incident
- Discovered
- Jul 28, 2012
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- InternalFinancial
- Regulator citations
- Submitted breach notification to California Office of the Attorney General
- Initial access
- insider_action
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.