DisclosureLens
HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

The Union Labor Life Insurance Company

bd_45abdf4a6ad9b0cb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 22, 2017

Filed

Oct 27, 2017

To disclose

18 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

64%
Full breach record for The Union Labor Life Insurance Company →14 incidents on file

On June 22, 2017, an unauthorized external user accessed an employee's Outlook email account at The Union Labor Life Insurance Company. The attacker sent spam emails with malicious links to contacts. A forensic review determined that the attacker may have viewed emails containing personal information, including names, SSNs, and PHI (claim numbers, diagnosis codes), of individuals. The company disabled the account, reset passwords, engaged forensic investigators, and offered 24 months of identity protection services.

California clockDiscovered Jun 22, 2017 → Notified Oct 17, 2017117d ✗ CA 60-day late18 weeks discovery → filing

Incident timeline

discovery → filing · 18 weeks / 127 days

Jun 22, 2017

Begins

Jun 22, 2017

Discovered

Oct 27, 2017

Filed

vs. sector median

+8 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
HHS OCROct 19 · first
California State AG+8d · this page

Pattern: first filing Oct 19 (MD), last Oct 27 (CA) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.