Oxford Life Insurance Company
bd_5e970293d82ec38f · schema v1 · pii pii-v1
Full breach record for Oxford Life Insurance Company →Oxford Life Insurance Company notified the NH Attorney General of a cybersecurity event on Feb 20, 2025. An external threat actor used social engineering (impersonating a collections company) to gain unauthorized access to an employee's computer and Oxford's network for approximately one hour. The actor copied files containing personal information of policyholders, claimants, and agents in New Hampshire. The incident did not involve ransomware. Oxford engaged a third-party forensic firm, contained the activity, and is offering identity restoration services.
J jump to incidentP pin to compareR raw source
Incident timeline
Feb 20, 2025
Begins
Feb 20, 2025
Discovered
May 13, 2025
Filed
vs. sector median
+3 wks slower
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- Oregon State AGbd_3a128a8f2d1960ba2025-05-13Candidate
- California State AGbd_b38782347f2f48272025-05-13Verified
- Maine State AGbd_c0e380bef0dfa0cd2025-05-13Verified
- Indiana State AGbd_caddaa76c0f31e1b2025-05-13Verified
Show 5 more filings ↓Show fewer ↑up to 12d gap
- Iowa State AGbd_d8a02c85b483331d2025-05-13Verified
- Nebraska State AGbd_e20a3b3413f499c42025-05-13Verified
- Massachusetts State AGbd_109cc1d5dea430c52025-05-14 · +1dVerified
- Vermont State AGbd_7629781055bba1982025-05-14 · +1dVerified
- Illinois State AGbd_795beed524dd67242025-05-01 · +12dVerified
Filing propagation · 10 filings · 10 states
View merged incident ↗Pattern: first filing May 1 (IL), last May 14 (VT) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.