HackingFinancial ServicesFinanceCustomer Data InvolvedMediumContained

The Northwestern Mutual Life Insurance Company

bd_604c26d3099e3fe9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 5, 2024

Filed

Feb 29, 2024

To disclose

24 days

Affected · nationwide

62,656316 in this filing

Linked

16 filings

Confidence

50%

Full breach record for The Northwestern Mutual Life Insurance Company →22 incidents on file

The Northwestern Mutual Life Insurance Company reported a data breach affecting 316 Maine residents due to a security incident at a third-party service provider. The breach occurred between October 29, 2023, and November 2, 2023, and was discovered on February 5, 2024. The company has offered 24 months of credit monitoring and identity theft protection services through Kroll to affected individuals.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 5, 2024 → Filed with AG Feb 29, 202424d ✓ ME AG ≤30d24 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 99 days

discovery → filing · 24 days

Oct 29, 2023

Begins

Feb 5, 2024

Discovered

Feb 29, 2024

Filed

vs. sector median

7 wks faster

This filing is one of 16 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Montana State AGbd_3c2a297f228ab4702024-02-29Verified
Massachusetts State AGbd_bfc4408712b72fa62024-02-29Verified
Oregon State AGbd_f32704b1d1b017c12024-02-29Verified
Indiana State AGbd_7f405322cd8b7cd62024-03-01 · +1dVerified

Show 6 more filings ↓up to 22d gap

New Hampshire State AGbd_c86992b6fc6b6a8c2024-03-08 · +8dVerified
Indiana State AGbd_2f40c7ba9b1e8a512024-02-16 · +13dVerified
Massachusetts State AGbd_33933653706e0f642024-02-16 · +13dVerified
Maine State AGbd_569adbdb9e453b182024-02-16 · +13dVerified
Montana State AGbd_fa687827ad46b0a52024-02-16 · +13dVerified
Montana State AGbd_34f99a0a1b7ccc3f2024-02-07 · +22dCandidate

Showing first 10 of 15 linked disclosures.

Name: The Northwestern Mutual Life Insurance Company
norm: the northwestern mutual life insurance
Domain: northwesternmutual.com

Name: The Northwestern Mutual Life Insurance Company
norm: the northwestern mutual life insurance
Domain: northwesternmutual.com
Industry: Financial Servicesllm

Discovered: Feb 5, 2024
Breach occurred: Oct 29, 2023 – Nov 2, 2023
Undetected for: 99 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 1, 2024
Affected individuals: 62,656state + nationwide
Data types: —
Attack vector: Third-Party / Supply Chain
Threat actor: External

Changes made: Offered 24 months of credit monitoring and identity theft protection services through Kroll.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 days(24 days from discovery to filing)
Compliance flags: ME AG ≤30d · 24d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 5, 2024
→ Filed with AG: Feb 29, 2024
24d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 5, 2024 → Filed with AG: Feb 29, 2024	24d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 6 states

View merged incident ↗

Montana State AGFeb 7 · first

Indiana State AG+9d

Massachusetts State AG+9d

Maine State AG+9d

Montana State AG+9d

Montana State AG+22d

Massachusetts State AG+22d

Oregon State AG+22d

Maine State AG+22d · this page

Indiana State AG+23d

New Hampshire State AG+30d

Pattern: first filing Feb 7 (MT), last Mar 8 (NH) — a 30-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/72dd4d27-d7fd-48dc-ad15-f9296a4c735a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 29, 2024
Raw hash: b401814f2b8a55b0d5752d9b724da2832f2acd4b0eec256294cd4ac4e8f142c7

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityThe Northwestern Mutual Life Insurance Company

Victim entityThe Northwestern Mutual Life Insurance Company

Incidentdiscovered Feb 5, 2024

Stated responseOffered 24 months of credit monitoring and identity theft protection services through Kroll.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov