DisclosureLens
HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Massachusetts Mutual Life Insurance Company

bd_61bf81906947ed94 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 2, 2023

Filed

Apr 27, 2023

To disclose

12 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

64%
Full breach record for Massachusetts Mutual Life Insurance Company48 incidents on file

MassMutual experienced unauthorized access to an independent agency employee's online account on February 1, 2023. The company became aware of the incident on February 2, 2023. The breach involved personal information, including names and potentially other identity data, accessed via the employee's Microsoft Outlook mailbox. MassMutual secured the account, launched an investigation, and offered 24 months of identity protection services through IdentityForce to affected individuals.

Incident timeline

undetected · 1 days
discovery → filing · 12 weeks / 84 days

Feb 1, 2023

Begins

Feb 2, 2023

Discovered

Apr 27, 2023

Filed

vs. sector median

+3 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Massachusetts State AGApr 26 · first
California State AG+1d · this page

Pattern: first filing Apr 26 (MA), last May 4 (IN) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.