HackingFinancial ServicesFinanceVulnerability ExploitData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Government IDFinancial accountHighContained

Aurora National Life Assurance Company

bd_58dcd7605860bfc6 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 3, 2023

Filed

Jul 21, 2023

To disclose

7 weeks

Affected

3,670state residents only

Linked

6 filings

Confidence

70%

Full breach record for Aurora National Life Assurance Company →

Aurora National Life Assurance Company notified Washington AG of a breach involving third-party vendor Pension Benefits Information, LLC. An unauthorized party exploited a vulnerability in MOVEit Transfer software to download policyholder data (SSNs, names, DOBs, account numbers) between May 29-30, 2023. Aurora discovered the incident on June 3, 2023, and notified affected individuals on July 21, 2023. 3,670 Washington residents were affected. Identity theft protection was offered.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d7 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 5 days

discovery → filing · 7 weeks / 48 days

May 29, 2023

Begins

Jun 3, 2023

Discovered

Jul 21, 2023

Filed

vs. sector median

2 wks faster

This filing is one of 6 about the same incident.View merged incident

Part of Pension Benefit Information, LLC supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Oregon State AGbd_058f48c17cbf2fdd2023-07-21Candidate
Massachusetts State AGbd_1a70c4f44aee52c32023-07-21Verified
Indiana State AGbd_4a42d2f59ec390102023-07-21Verified
California State AGbd_9ecd979007d86dad2023-07-21Verified

Show 1 more filing ↓

Maine State AGbd_adc72ca4f2603c2d2023-07-21Verified

Name: Aurora National Life Assurance Company
norm: aurora national life assurance

Name: Aurora National Life Assurance Company
norm: aurora national life assurance
Industry: Financial Servicesllm

Discovered: Jun 3, 2023
Breach occurred: May 29, 2023 – May 30, 2023
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 21, 2023
Affected individuals: 3,670state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: PBI has notified and is cooperating with federal law enforcement authorities
Third party: via Pension Benefits Information, LLC
Initial access: exploit_public_facing

During the incident: Alliance-One immediately stopped all file transfers to PBI
PBI has confirmed the incident is contained
PBI has implemented multiple additional security measures to harden its information systems
PBI has notified and is cooperating with federal law enforcement authorities
Aurora has retained NortonLifeLock to provide One (1) year(s) of complimentary LifeLock DefenderTM Choice identity theft protection
Changes made: PBI has implemented multiple additional security measures to harden its information systems and increase its ability to deter threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(48 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Oregon State AGJul 21 · first

Massachusetts State AGJul 21 · first

Indiana State AGJul 21 · first

California State AGJul 21 · first

Maine State AGJul 21 · first

Washington State AGJul 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA25950.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2023
Raw hash: dedff60760076ae5f463c430036a56599007c3f90897e181c21556f3f5015d15

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityAurora National Life Assurance Company

Victim entityAurora National Life Assurance Company

Incidentdiscovered Jun 3, 2023

Stated responseAlliance-One immediately stopped all file transfers to PBI

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com