MisusePrivilege AbuseData MishandlingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICHEALTH_BASICFINANCIAL_ACCOUNTLowContained
Assurance IQ, LLC
bd_2f80a5dce0ac46c3 · schema v1 · pii pii-v1
Full breach record for Assurance IQ, LLC →Assurance IQ, LLC disclosed that a contracted agent inappropriately used their credentials to access agent systems and share customer information for unauthorized solicitation of life insurance policy cancellations. The incident occurred between April 1, 2022, and January 11, 2024, and was discovered on February 12, 2024. Affected data included names, dates of birth, addresses, income, occupation, health conditions, and policy details. Assurance disabled the agent's access, terminated their contract, enhanced monitoring, and reported the incident to law enforcement.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_507cd5d71d6e9f51Washington State AGfiled 2024-03-04Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-581880
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 4, 2024
- Raw hash
- 10786a8f74171df9b11aeb74b0009133d5f388ce6c2225e4a30d4f5bc978958e
Reporting entity
- Name
- Assurance IQ, LLCnorm: assurance iq
Victim entity
- Name
- Assurance IQ, LLCnorm: assurance iq
Incident
- Discovered
- Feb 12, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- PartnerFinancial
- Regulator citations
- Reported this incident to law enforcement
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.