AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumContained

THE LINCOLN NATIONAL LIFE INSURANCE COMPANY

bd_2ecad9b1de5b48e7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 17, 2011

Filed

Jul 13, 2011

To disclose

8 weeks

Affected

705

Confidence

66%

Full breach record for THE LINCOLN NATIONAL LIFE INSURANCE COMPANY →31 incidents on file

Lincoln National Life Insurance Company notified NH AG of an inadvertent disclosure of names and SSNs of 705 pension plan participants to a third-party payroll vendor via email on April 29, 2011. Discovered May 17, 2011. 2 NH residents affected. No evidence of misuse found. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 18 days

discovery → filing · 8 weeks / 57 days

Apr 29, 2011

Begins

May 17, 2011

Discovered

Jul 13, 2011

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed705 affectedView incident

Name: THE LINCOLN NATIONAL LIFE INSURANCE COMPANY
norm: the lincoln national life insurance

Name: THE LINCOLN NATIONAL LIFE INSURANCE COMPANY
norm: the lincoln national life insurance
Industry: Financial Servicesllm

Discovered: May 17, 2011
Breach occurred: Apr 29, 2011
Undetected for: 18 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 15, 2011
Affected individuals: 705state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: Internal

During the incident: Removed the email message from Lincoln’s secure server
Took steps to ensure any copies were destroyed
Provided additional training on Company policies to employees
Engaged Experian to provide free credit monitoring services
Changes made: Provided additional training on Company policies to employees to prevent similar errors in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lincoln-life-20110713.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 13, 2011
Raw hash: fdb40810b87a4c78778974eb460dbedb5bccbac2185e9a656ede9bdb4c5e0870

Reporting entityTHE LINCOLN NATIONAL LIFE INSURANCE COMPANY

Victim entityTHE LINCOLN NATIONAL LIFE INSURANCE COMPANY

Incidentdiscovered May 17, 2011

Stated responseRemoved the email message from Lincoln’s secure server

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov