Social EngineeringProfessional ServicesFinancial ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Financial accountMediumContained

NATIONAL LIFE INSURANCE COMPANY

bd_238a39406ba68732 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Aug 21, 2026

Filed

Oct 13, 2026

To disclose

8 weeks

Affected · nationwide

3,993166 in this filing

Linked

2 filings

Confidence

69%

Full breach record for NATIONAL LIFE INSURANCE COMPANY →

Squire Patton Boggs (US) LLP notified the NH Attorney General of a security incident affecting its client, National Life Insurance Company. On August 21, 2026, an unauthorized actor compromised a single user account via social engineering, gaining limited access to client data. The incident was detected and contained on the same day. The breach affected 3,993 individuals nationwide, including 166 New Hampshire residents. Affected data included names, addresses, insurance account numbers, and dates of birth. Squire Patton Boggs engaged third-party experts, notified law enforcement, and is offering credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 53 days

Aug 21, 2026

Begins

Aug 21, 2026

Discovered

Oct 13, 2026

Filed

vs. sector median

12 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Vermont State AGbd_6e6cc9085cea257e2026-10-08 · +5dCandidate

Name: Squire Patton Boggs
norm: squire patton boggs
Domain: squirepattonboggs.com
Industry: professional_services

Name: NATIONAL LIFE INSURANCE COMPANY
norm: national life insurance
Industry: financial_services
Industry: Professional ServicesllmFinancial Servicesllm

Discovered: Aug 21, 2026
Breach occurred: Aug 21, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 9, 2026
Affected individuals: 3,993state + nationwide
Data types: Identity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified state regulatorsNotified federal law enforcement
Third party: via Squire Patton Boggs (US) LLP
Initial access: phishing_link

During the incident: Terminated the user account connection
Eliminated the unauthorized access
Launched an investigation with the support of third-party and subject matter experts
Notified federal law enforcement
Notified state regulators
Implemented a range of additional security controls, system monitoring, and detection capabilities
Offering complimentary identity theft and credit protection services to affected individuals through Epiq
Established a call center to respond to individuals' questions
Notifying the three major credit reporting agencies
Changes made: Implemented a range of additional security controls, system monitoring, and detection capabilities as a precaution against any similar intrusion
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(53 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Vermont State AGOct 8 · first

New Hampshire State AG+5d · this page

Pattern: first filing Oct 8 (VT), last Oct 13 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/squire-patton-boggs-20261013.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 13, 2026
Raw hash: 8a1940ee972dfa9af245acdf1d7f7f23932fa15845532ca90cd2a94899ca6a60

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySquire Patton Boggs

Victim entityNATIONAL LIFE INSURANCE COMPANY

Incidentdiscovered Aug 21, 2026

Stated responseTerminated the user account connection

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov