The Union Labor Life Insurance Company

On June 22, 2017, an unauthorized external user accessed an employee's Outlook email account at The Union Labor Life Insurance Company. The attacker sent spam emails with malicious links to contacts. A forensic review determined that the attacker may have viewed emails containing personal information, including names, SSNs, and PHI (claim numbers, diagnosis codes), of individuals. The company disabled the account, reset passwords, engaged forensic investigators, and offered 24 months of identity protection services.