Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedPIIIdentity (basic)LowContained

Pacific Guardian Life Insurance Company, Limited

bd_35e5284b8c3747a6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 4, 2019

Filed

Feb 17, 2020

To disclose

15 weeks

Affected

12state residents only

Linked

3 filings

Confidence

66%

Full breach record for Pacific Guardian Life Insurance Company, Limited →3 incidents on file

Pacific Guardian Life Insurance Co. Ltd. notified Montana AG of a data incident involving unauthorized access to an employee email account. Discovered Nov 4, 2019, via suspicious activity likely caused by phishing. Personal information of policyholders may have been viewed/downloaded. No evidence of misuse. Company engaged forensic investigators and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 weeks / 105 days

Nov 4, 2019

Discovered

Feb 17, 2020

Filed

vs. sector median

+6 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_ffa3307442e5dc992020-02-17Verified
Massachusetts State AGbd_30a0a79504a48e252020-02-21 · +4dVerified

Name: Pacific Guardian Life Insurance Company, Limited
norm: pacific guardian life insurance

Name: Pacific Guardian Life Insurance Company, Limited
norm: pacific guardian life insurance
Industry: Financial Servicesllm

Discovered: Nov 4, 2019
Materiality determined: —
Notification sent: Feb 18, 2020
Affected individuals: 12state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Secured the affected email account
Began an internal investigation
Engaged a leading independent digital forensics firm
Offering complimentary identity theft protection services through ID Experts
Changes made: Working with leading cybersecurity experts to independently review the security of our network environment
Plan to use findings of that review to further enhance the security of the network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(105 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGFeb 17 · first

Montana State AGFeb 17 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-117.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 17, 2020
Raw hash: 2df8c94d9799e0766956ea1811123eec10122fcd2fdf2a7b6a9019cc464024cd

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityPacific Guardian Life Insurance Company, Limited

Victim entityPacific Guardian Life Insurance Company, Limited

Incidentdiscovered Nov 4, 2019

Stated responseSecured the affected email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov