MalwareFinancial ServicesFinanceRansomwareCapture Stored DataSupply Chain (3P Vendor)Ransom DemandedData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryPIILowResolved
The Northwestern Mutual Life Insurance Company
bd_286b55f499b42ac8 · schema v1 · pii pii-v1
Full breach record for The Northwestern Mutual Life Insurance Company →Northwestern Mutual's vendor Infosys McCamish Systems (IMS) suffered a ransomware attack between October 29–November 2, 2023. IMS systems were encrypted and data was subject to unauthorized access and acquisition. The incident was contained and remediated in November 2023. Northwestern Mutual determined impact to its customers on June 7, 2024; 291 Maine residents were affected. Affected individuals were offered 24 months of credit monitoring through Kroll.
Maine clockDiscovered Feb 5, 2024 → Filed with AG Jun 27, 2024143d ✗ ME AG >90d20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_272a1b1cde119499California State AGfiled 2024-06-27Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6cc68a77-d2d7-43ee-a25b-169cae6c67c7.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 27, 2024
- Raw hash
- c5af6ca9c2813054902d359997bf0102c288c8d93dd020104531d11fbb0a390e
Reporting entity
- Name
- The Northwestern Mutual Life Insurance Companynorm: the northwestern mutual life insurance
- Domain
- northwesternmutual.com
- Industry
- Financial Services
Victim entity
- Name
- The Northwestern Mutual Life Insurance Companynorm: the northwestern mutual life insurance
- Domain
- northwesternmutual.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Feb 5, 2024
- Materiality determined
- —
- Notification sent
- Mar 1, 2024
- Affected individuals
- 291
- Data types
- PII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Maine Attorney General notified
- Third party
- via Infosys McCamish Systems, LLC
- Initial access
- supply_chain
Compliance
- Time to disclose
- 20 weeks(143 days from discovery to filing)
- Compliance flags
- ME AG >90d · 143d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 5, 2024→ Filed with AG: Jun 27, 2024143d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.