HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedMediumContained

The Northwestern Mutual Life Insurance Company

bd_569adbdb9e453b18 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 29, 2024

Filed

Feb 16, 2024

To disclose

18 days

Affected · nationwide

24,51828 in this filing

Linked

16 filings

Confidence

50%

Full breach record for The Northwestern Mutual Life Insurance Company →22 incidents on file

The Northwestern Mutual Life Insurance Company reported a data breach affecting 28 Maine residents. The breach occurred at a third-party service provider between October 29, 2023, and November 2, 2023. The incident was discovered on January 29, 2024. The company has offered 12 months of identity theft protection services through Experian to those affected.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 29, 2024 → Filed with AG Feb 16, 202418d ✓ ME AG ≤30d18 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 92 days

discovery → filing · 18 days

Oct 29, 2023

Begins

Jan 29, 2024

Discovered

Feb 16, 2024

Filed

vs. sector median

7 wks faster

This filing is one of 16 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Indiana State AGbd_2f40c7ba9b1e8a512024-02-16Verified
Massachusetts State AGbd_33933653706e0f642024-02-16Verified
Montana State AGbd_fa687827ad46b0a52024-02-16Verified
Montana State AGbd_34f99a0a1b7ccc3f2024-02-07 · +9dCandidate

Show 6 more filings ↓up to 21d gap

Montana State AGbd_3c2a297f228ab4702024-02-29 · +13dVerified
Maine State AGbd_604c26d3099e3fe92024-02-29 · +13dVerified
Massachusetts State AGbd_bfc4408712b72fa62024-02-29 · +13dVerified
Oregon State AGbd_f32704b1d1b017c12024-02-29 · +13dVerified
Indiana State AGbd_7f405322cd8b7cd62024-03-01 · +14dVerified
New Hampshire State AGbd_c86992b6fc6b6a8c2024-03-08 · +21dVerified

Showing first 10 of 15 linked disclosures.

Name: The Northwestern Mutual Life Insurance Company
norm: the northwestern mutual life insurance
Domain: northwesternmutual.com

Name: The Northwestern Mutual Life Insurance Company
norm: the northwestern mutual life insurance
Domain: northwesternmutual.com
Industry: Financial Servicesllm

Discovered: Jan 29, 2024
Breach occurred: Oct 29, 2023 – Nov 2, 2023
Undetected for: 92 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 16, 2024
Affected individuals: 24,518state + nationwide
Data types: —
Attack vector: Third-Party / Supply Chain

Changes made: Offered 12 months of identity theft protection services through Experian.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: ME AG ≤30d · 18d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 29, 2024
→ Filed with AG: Feb 16, 2024
18d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 29, 2024 → Filed with AG: Feb 16, 2024	18d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 6 states

View merged incident ↗

Montana State AGFeb 7 · first

Indiana State AG+9d

Massachusetts State AG+9d

Montana State AG+9d

Maine State AG+9d · this page

Montana State AG+22d

Maine State AG+22d

Massachusetts State AG+22d

Oregon State AG+22d

Indiana State AG+23d

New Hampshire State AG+30d

Pattern: first filing Feb 7 (MT), last Mar 8 (NH) — a 30-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/62916bb9-1af3-4b88-88d9-d4dda48b5fd1.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 16, 2024
Raw hash: 96053ad63886f080db5ff5cd1caf5cf73791c351526f8187243ed44754272bd8

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityThe Northwestern Mutual Life Insurance Company

Victim entityThe Northwestern Mutual Life Insurance Company

Incidentdiscovered Jan 29, 2024

Stated responseOffered 12 months of identity theft protection services through Experian.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov