HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
American Family Life Insurance Company
bd_5d979f4d30572496 · schema v1 · pii pii-v1
Full breach record for American Family Life Insurance Company →American Family Life Insurance Company (AFLIC) disclosed a data breach involving its online life insurance quoting platform. Between December 5 and 11, 2021, unauthorized parties used automated bots to access the platform, potentially obtaining consumers' driver's license numbers. AFLIC blocked the activity, enhanced security controls, and offered 12 months of credit monitoring to affected individuals.
California clockDiscovered Dec 11, 2021 → Notified Jan 14, 202234d ✓ CA 60-day OK5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-550021
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 14, 2022
- Raw hash
- 8adbb41dddd228c9e59741277ac1f465b741a3bd18e133f2af334ff58387ecaa
Reporting entity
- Name
- American Family Life Insurance Companynorm: american family life insurance
Victim entity
- Name
- American Family Life Insurance Companynorm: american family life insurance
Incident
- Discovered
- Dec 11, 2021
- Materiality determined
- —
- Notification sent
- Jan 14, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 34d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 11, 2021→ Notified: Jan 14, 202234d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.