LUMICO LIFE INSURANCE COMPANY
bd_60ed3513a32e4a46 · schema v1 · pii pii-v1
Full breach record for LUMICO LIFE INSURANCE COMPANY →2 incidents on fileLumico Life Insurance Company disclosed that a third-party service provider (NTT Data Services) and its sub-vendor (Pension Benefits Information, LLC) were compromised via an exploit of the MOVEit Transfer application vulnerability. The incident occurred between May 29-30, 2023, and was discovered on June 19, 2023. Policyholder data including names, SSNs, DOBs, and addresses was exfiltrated. Lumico engaged Kroll for identity monitoring and notified regulators.
J jump to incidentP pin to compareR raw source
Incident timeline
May 29, 2023
Begins
Jun 19, 2023
Discovered
Aug 1, 2023
Filed
vs. sector median
2 wks faster
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- South Carolina State AGbd_2c84a71aabc7f8e42023-08-01Verified
- Massachusetts State AGbd_8db61e50e539b92a2023-08-01Verified
- Indiana State AGbd_9d4ecdb86f3319ff2023-07-28 · +4dVerified
- Washington State AGbd_edf05202d53296222023-07-27 · +5dVerified
Show 4 more filings ↓Show fewer ↑up to 16d gap
- Delaware State AGbd_d6bf8fde23a83ea12023-07-26 · +6dVerified
- Hawaii State AGbd_157503e1142976682023-08-08 · +7dVerified
- Oregon State AGbd_a4bb1ffa233d029e2023-08-14 · +13dVerified
- Delaware State AGbd_f409b232fcffae5c2023-07-16 · +16dCandidate
Filing propagation · 9 filings · 8 states
View merged incident ↗Pattern: first filing Jul 16 (DE), last Aug 14 (OR) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.