HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
American Family Life Assurance Company of Columbus and Continental American Insurance Company
bd_6cf6329acfb20c66 · schema v1 · pii pii-v1
Full breach record for American Family Life Assurance Company of Columbus and Continental American Insurance Company →Aflac notified California residents of possible unauthorized access to Microsoft Office 365 email accounts of sales agents between September 8, 2017, and May 9, 2018. Affected data may include names, addresses, dates of birth, policy numbers, social security numbers, and general health information. Aflac engaged third-party experts, reset passwords, isolated accounts, and offered one year of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-140247
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 28, 2018
- Raw hash
- b67f18aa2d76bb06b90d40409208902966e3367856be6763334f4ec65b5b447e
Reporting entity
- Name
- American Family Life Assurance Company of Columbus and Continental American Insurance Companynorm: american family life assurance company of columbus and continental american insurance
Victim entity
- Name
- American Family Life Assurance Company of Columbus and Continental American Insurance Companynorm: american family life assurance company of columbus and continental american insurance
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Apr 30, 2019
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Third party
- via Microsoft
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.