MalwareRansomwareSupply Chain (3P Vendor)Ransom DemandedData EncryptedCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTHighResolved
HERITAGE LIFE INSURANCE COMPANY
bd_7bf68d72b35a2952 · schema v1 · pii pii-v1
Full breach record for HERITAGE LIFE INSURANCE COMPANY →Heritage Life Insurance Company reported a data breach affecting 58,144 individuals. The incident was a ransomware attack at a third-party IT services vendor. The breach occurred and was discovered on March 12, 2022. Exposed information includes names and Social Security numbers. The company began notifying affected individuals on July 13, 2022, and offered 12 months of identity theft and credit monitoring services.
Maine clockDiscovered Mar 12, 2022 → Filed with AG Jul 7, 2022117d ✗ ME AG >90d17 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_32fe7e85d055dc7cWashington State AGfiled 2022-07-08(1d gap)Verified
- bd_7cced443f4d63d32Maine State AGfiled 2022-07-08(1d gap)Candidate
- bd_4b9699f3bfd93e35California State AGfiled 2022-07-14(7d gap)Verified
- bd_de282c076ab82524Montana State AGfiled 2022-07-14(7d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 7d gap
- bd_ed52f06bbb2c84e1Oregon State AGfiled 2022-07-14(7d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f5517460-35e8-451e-aa8e-a85b6b0abea2.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2022
- Raw hash
- a8dc71b8d844d4f433f3e98db98167d16d46b855fe5d75d413db6dd6c573cd66
Reporting entity
- Name
- HERITAGE LIFE INSURANCE COMPANYnorm: heritage life insurance
Victim entity
- Name
- HERITAGE LIFE INSURANCE COMPANYnorm: heritage life insurance
Incident
- Discovered
- Mar 12, 2022
- Materiality determined
- —
- Notification sent
- Jul 13, 2022
- Affected individuals
- 58,144
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 17 weeks(117 days from discovery to filing)
- Compliance flags
- ME AG >90d · 117dME resident >60d · 123d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 12, 2022→ Filed with AG: Jul 7, 2022117d 90 days ME AG >90d Maine Discovered: Mar 12, 2022→ Notified: Jul 13, 2022123d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.