MalwareRansomwareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumActive
NATIONAL WESTERN LIFE INSURANCE COMPANY
bd_27b9bce48c7bd735 · schema v1 · pii pii-v1
Full breach record for NATIONAL WESTERN LIFE INSURANCE COMPANY →National Western Life Insurance Company (NWL) disclosed a malware incident discovered on August 15, 2020, affecting systems between August 7-10, 2020. The breach impacted 585 Delaware residents, exposing names, SSNs, policy numbers, financial account info, payment card data, and tax IDs. NWL engaged third-party investigators, notified federal law enforcement, and offered 12 months of credit monitoring. The investigation and manual file review were ongoing at the time of filing.
Leak gap clock⏱ Leak >90d23 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by revil about this victim predates this filing by 177 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_df6f1c04fd2bb992California State AGfiled 2021-01-25Candidate
- bd_0474e4e1745534fcHawaii State AGfiled 2021-01-14(11d gap)Verified
- bd_d14332d9967bb20eSouth Carolina State AGfiled 2021-01-14(11d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/02/Notice-of-Data-Event-NWL-DE-Exhibit-1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 25, 2021
- Raw hash
- 01abaccf6ec6c1dc5106be178347c2223cc613af34feebee83b111f9f6ea8a0c
Reporting entity
- Name
- NATIONAL WESTERN LIFE INSURANCE COMPANYnorm: national western life insurance
- Domain
- nationalwesternlife.com
Victim entity
- Name
- NATIONAL WESTERN LIFE INSURANCE COMPANYnorm: national western life insurance
- Domain
- nationalwesternlife.com
Incident
- Discovered
- Aug 15, 2020
- Materiality determined
- —
- Notification sent
- Jan 25, 2021
- Affected individuals
- 585
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- preliminary notice to your office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 23 weeks(163 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.