UnknownFinanceMedium

Oxford Life Insurance Company

bd_3a128a8f2d1960ba · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 18, 2025

Filed

May 13, 2025

To disclose

25 days

Affected

25,659

Linked

10 filings

Confidence

95%

Full breach record for Oxford Life Insurance Company →

Oxford Life Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2025-05-13. The breach occurred during 2/20/2025 - 2/20/2025. The breach was discovered on 4/18/2025. 25,659 individuals were affected. Notice was sent on 5/13/2025.

J jump to incidentP pin to compareR raw source

Oregon clock✓ OR AG ≤45d25 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 57 days

discovery → filing · 25 days

Feb 20, 2025

Begins

Apr 18, 2025

Discovered

May 13, 2025

Filed

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

New Hampshire State AGbd_5e970293d82ec38f2025-05-13Verified
California State AGbd_b38782347f2f48272025-05-13Verified
Maine State AGbd_c0e380bef0dfa0cd2025-05-13Verified
Indiana State AGbd_caddaa76c0f31e1b2025-05-13Verified

Show 5 more filings ↓up to 12d gap

Iowa State AGbd_d8a02c85b483331d2025-05-13Verified
Nebraska State AGbd_e20a3b3413f499c42025-05-13Verified
Massachusetts State AGbd_109cc1d5dea430c52025-05-14 · +1dVerified
Vermont State AGbd_7629781055bba1982025-05-14 · +1dVerified
Illinois State AGbd_795beed524dd67242025-05-01 · +12dVerified

Name: Oxford Life Insurance Company
norm: oxford life insurance
Domain: oxfordlife.com

Name: Oxford Life Insurance Company
norm: oxford life insurance
Domain: oxfordlife.com

Discovered: Apr 18, 2025
Breach occurred: Feb 20, 2025
Undetected for: 57 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 13, 2025
Affected individuals: 25,659nationwide
Data types: —
Attack vector: Unknown

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: OR AG ≤45d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Illinois State AGMay 1 · first

New Hampshire State AG+12d

California State AG+12d

Maine State AG+12d

Indiana State AG+12d

Iowa State AG+12d

Nebraska State AG+12d

Oregon State AG+12d · this page

Massachusetts State AG+13d

Vermont State AG+13d

Pattern: first filing May 1 (IL), last May 14 (VT) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 13, 2025
Raw hash: 2c18a635b94b30630869041736144c52e9d9970fbc906b11770a7130cdae4393

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityOxford Life Insurance Company

Victim entityOxford Life Insurance Company

Incidentdiscovered Apr 18, 2025

ComplianceOR AG ≤45d

Extraction provenanceno artifact recorded

Source provenancejustice.oregon.gov