HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
NEW YORK LIFE INSURANCE COMPANY
bd_2275313f347a3b82 · schema v1 · pii pii-v1
Full breach record for NEW YORK LIFE INSURANCE COMPANY →New York Life Insurance Company reported an external system breach (hacking) occurring on May 29, 2023, discovered on June 12, 2023. The incident affected 1,367 individuals, including 3 Maine residents. Acquired data included names and Social Security Numbers. The company provided written notification and offered 12 months of Kroll Identity Monitoring services.
Maine clockDiscovered Jun 12, 2023 → Filed with AG Aug 10, 202359d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 10 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- bd_aea6f9438346020fCalifornia State AGfiled 2023-08-10Candidate
- bd_0e1c9b9c854304bbMaine State AGfiled 2023-08-11(1d gap)Verified
- bd_8c7a428205597b36California State AGfiled 2023-08-11(1d gap)Verified
- bd_3e32b53431a6efdaWashington State AGfiled 2023-08-24(14d gap)Verified
Show 5 more filings ↓Show fewer ↑up to 74d gap
- bd_bd81384556d7cb8eMaine State AGfiled 2023-08-24(14d gap)Verified
- bd_fae5706e9cae755dOregon State AGfiled 2023-08-24(14d gap)Verified
- bd_166d785649d0cf77Washington State AGfiled 2023-10-23(74d gap)Candidate
- bd_8beaf5d613d1c2a9Oregon State AGfiled 2023-10-23(74d gap)Candidate
- bd_cff49122540e8170Maine State AGfiled 2023-10-23(74d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b5de2e74-bee0-4b8b-aa94-34892fe80c6c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 10, 2023
- Raw hash
- d47bccaad5433475389e7705f58a1500bb4960383db22ca46b3afb7e9deda291
Reporting entity
- Name
- NEW YORK LIFE INSURANCE COMPANYnorm: new york life insurance
- Domain
- newyorklife.com
- Industry
- Financial Services
Victim entity
- Name
- NEW YORK LIFE INSURANCE COMPANYnorm: new york life insurance
- Domain
- newyorklife.com
- Industry
- Financial Services
Incident
- Discovered
- Jun 12, 2023
- Materiality determined
- —
- Notification sent
- Aug 10, 2023
- Affected individuals
- 1,367
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- ME AG >30d · 59d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 12, 2023→ Filed with AG: Aug 10, 202359d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.