HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Pekin Insurance

bd_575011d28195c054 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 6, 2022

Filed

Feb 22, 2022

To disclose

7 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

64%

Full breach record for Pekin Insurance →

Pekin Insurance disclosed that an unauthorized party obtained login credentials for an independent insurance agent and used them to access driver information on a third-party tool between December 4, 2021, and January 6, 2022. The incident involved exposure of names, addresses, driver's license numbers, and dates of birth. Pekin Insurance terminated access, reset credentials, implemented encryption and two-factor authentication, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 6, 2022 → Notified Feb 18, 202243d ✓ CA 60-day OK7 weeks discovery → filing

Incident timeline

undetected · 33 days

discovery → filing · 7 weeks / 47 days

Dec 4, 2021

Begins

Jan 6, 2022

Discovered

Feb 22, 2022

Filed

vs. sector median

3 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_1544e8f9893440fc2022-02-22Verified
Massachusetts State AGbd_0fdff4a2d87634672022-02-25 · +3dVerified
Montana State AGbd_34be7d630d72a0e82022-02-18 · +4dCandidate
Indiana State AGbd_6fb62679e93936ce2022-02-18 · +4dVerified

Name: Pekin Insurance
norm: pekin insurance

Name: Pekin Insurance
norm: pekin insurance
Industry: Financial Servicesllm

Discovered: Jan 6, 2022
Breach occurred: Dec 4, 2021 – Jan 6, 2022
Undetected for: 33 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 18, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Third party: via Independent insurance agent
Initial access: valid_credentials

During the incident: Removed access from the unauthorized party
Contacted the independent agent office to change their login information to the Pekin agent website
Providing free access to fraud assistance services for 90 days
Providing access to Single Bureau Credit Monitoring services at no charge for twelve months
Changes made: Implementing additional security safeguards such as data encryption
Implementing two-factor authentication
Continuing to monitor system and login activity
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(47 days from discovery to filing)
Compliance flags: CA 60-day OK · 43d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 6, 2022
→ Notified: Feb 18, 2022
43d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 6, 2022 → Notified: Feb 18, 2022	43d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGFeb 18 · first

Indiana State AGFeb 18 · first

Maine State AG+4d

California State AG+4d · this page

Massachusetts State AG+7d

Pattern: first filing Feb 18 (MT), last Feb 25 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-551128
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 22, 2022
Raw hash: ce587d08ffdf42004886656dca876854d23e2dd51af90fc4cd7ce157924338a1

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityPekin Insurance

Victim entityPekin Insurance

Incidentdiscovered Jan 6, 2022

Stated responseRemoved access from the unauthorized party

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov