HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Empire Fidelity Investments Life Insurance Company
bd_6a230510306768c3 · schema v1 · pii pii-v1
Full breach record for Empire Fidelity Investments Life Insurance Company →Fidelity Investments Life Insurance reported a breach involving a third-party vendor, Infosys McCamish Systems LLC, occurring between October 29 and November 2, 2023. The incident compromised names and Social Security Numbers of 29,073 individuals, including 170 Maine residents. The breach was discovered on February 13, 2024, and written notifications were sent on March 15, 2024, offering 24 months of credit monitoring and identity theft restoration services via TransUnion.
Maine clockDiscovered Feb 13, 2024 → Filed with AG Mar 18, 202434d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed29,073 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ca66531f-48c0-4d07-8237-5eed98336cb1.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 18, 2024
- Raw hash
- 3aca99fdf3d63f5852fd48b1c0465aa1a4395d586d546e60762eed6227da8634
Reporting entity
- Name
- Empire Fidelity Investments Life Insurance Companynorm: empire fidelity investments life insurance
- Domain
- fidelity.com
- Industry
- Financial Services
Victim entity
- Name
- Empire Fidelity Investments Life Insurance Companynorm: empire fidelity investments life insurance
- Domain
- fidelity.com
- Industry
- Financial Services
Incident
- Discovered
- Feb 13, 2024
- Materiality determined
- —
- Notification sent
- Mar 15, 2024
- Affected individuals
- 29,073
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Third party
- via Infosys McCamish Systems LLC
- Initial access
- supply_chain
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- ME AG >30d · 34d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 13, 2024→ Filed with AG: Mar 18, 202434d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.