HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountPIIMediumContained

State Farm Mutual Automobile Insurance Company

bd_6189fd78dcfbcc84 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 16, 2017

Filed

Jun 29, 2017

To disclose

13 days

Affected

1state residents only

Confidence

66%

State Farm Mutual Automobile Insurance Company notified Montana residents of a data breach where unauthorized actors used valid credentials to access online accounts on statefarm.com. The incident involved unauthorized transactions and profile changes, exposing names, SSNs, driver's license numbers, and financial card numbers. State Farm disabled access, reversed transactions, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 days

Jun 16, 2017

Begins

Jun 16, 2017

Discovered

Jun 29, 2017

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: State Farm Mutual Automobile Insurance Company
norm: state farm mutual automobile insurance
Domain: statefarm.com

Name: State Farm Mutual Automobile Insurance Company
norm: state farm mutual automobile insurance
Domain: statefarm.com
Industry: Financial Servicesllm

Discovered: Jun 16, 2017
Breach occurred: Jun 16, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 29, 2017
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Disabled access to your accounts at statefarm.com
Reversed the unauthorized transactions and profile changes
Offering you a free one-year subscription to myTrueIdentity, a credit monitoring and identity theft protection service provided by TransUnion Interactive
Changes made: Reviewing and will implement measures to further reduce the risk of future unauthorized access to your accounts on statefarm.com
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/State-Farm-1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 29, 2017
Raw hash: 8b642c025bd37665091d5ae00bba0ee4237a81327c9c9d397e0edce032518264

Reporting entityState Farm Mutual Automobile Insurance Company

Victim entityState Farm Mutual Automobile Insurance Company

Incidentdiscovered Jun 16, 2017

Stated responseDisabled access to your accounts at statefarm.com

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov