MalwareRansomwareData ExfiltratedData EncryptedRansom DemandedRansom PaidCustomer Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHighContained
Horizon Actuarial
bd_5111b6c88c94f7aa · schema v1 · pii pii-v1
Full breach record for Horizon Actuarial →Horizon Actuarial Services, LLC reported an unauthorized access to its computer servers on November 10-11, 2021. The incident involved ransomware that encrypted data and resulted in the exfiltration of personal information, including names, SSNs, bank account numbers, and health insurance plan details. The company paid a ransom to the threat actor in exchange for a promise to delete the data. Notification was sent to approximately 6,413 Idaho residents, offering 12 months of identity monitoring services.
This filing is one of 20 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_0137fc9d43a66d3dCalifornia State AGfiled 2022-03-25Verified
- bd_3f0edaeb78405833Maine State AGfiled 2022-03-22(3d gap)Verified
- bd_53f26450ae728dacMaine State AGfiled 2022-03-22(3d gap)Verified
- bd_5c05f2edbfa8a93fMaine State AGfiled 2022-03-22(3d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 60d gap
- bd_3529f9df1be2849bMaine State AGfiled 2022-04-11(17d gap)Verified
- bd_ff25b9191ff88ab5Idaho State AGfiled 2022-04-11(17d gap)Verified
- bd_aebae786303bb6acMaine State AGfiled 2022-04-15(21d gap)Verified
- bd_570c80b01bbe9116Maine State AGfiled 2022-04-26(32d gap)Verified
- bd_68e3218b8c9d431dMaine State AGfiled 2022-05-10(46d gap)Verified
- bd_63ec2cad1130c87cMaine State AGfiled 2022-05-24(60d gap)Verified
Showing first 10 of 19 linked disclosures.
Source provenance
- Source URL
- https://ag.idaho.gov/content/uploads/2022/04/03-25-2022-Horizon-Actuarial-Services-LLC.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2022
- Raw hash
- e4749395391a56e9fe8ddc4b1154c9bfeab786554cfc833c51837455221a3a89
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Horizon Actuarialnorm: horizon actuarial
- Domain
- horizonactuarial.com
Incident
- Discovered
- Nov 12, 2021
- Materiality determined
- —
- Notification sent
- Jan 13, 2022
- Affected individuals
- 6,413
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- provided notice to the FBISupplemental Notice of Data Event filed with Idaho Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 19 weeks(133 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.