MalwareRansomwareSupply Chain (3P Vendor)Ransom DemandedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
HERITAGE LIFE INSURANCE COMPANY
bd_7cced443f4d63d32 · schema v1 · pii pii-v1
Full breach record for HERITAGE LIFE INSURANCE COMPANY →Heritage Life Insurance Company reported a data breach affecting 315 Maine residents. The breach was a result of a ransomware attack on one of its IT service vendors, which was discovered on March 12, 2022. The compromised information includes names and Social Security numbers. The company offered 12 months of identity theft and credit monitoring services to the affected individuals.
Maine clockDiscovered Mar 12, 2022 → Filed with AG Jul 8, 2022118d ✗ ME AG >90d17 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_32fe7e85d055dc7cWashington State AGfiled 2022-07-08Verified
- bd_7bf68d72b35a2952Maine State AGfiled 2022-07-07(1d gap)Candidate
- bd_4b9699f3bfd93e35California State AGfiled 2022-07-14(6d gap)Verified
- bd_de282c076ab82524Montana State AGfiled 2022-07-14(6d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 6d gap
- bd_ed52f06bbb2c84e1Oregon State AGfiled 2022-07-14(6d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9945aaf7-49b9-43ac-be7b-931ba122c8aa.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 8, 2022
- Raw hash
- e6e74e94931740c3755ea5b6b4484ebc39f4d303b870dbc8177c7d3b3ae2b9fb
Reporting entity
- Name
- HERITAGE LIFE INSURANCE COMPANYnorm: heritage life insurance
Victim entity
- Name
- HERITAGE LIFE INSURANCE COMPANYnorm: heritage life insurance
Incident
- Discovered
- Mar 12, 2022
- Materiality determined
- —
- Notification sent
- Jul 13, 2022
- Affected individuals
- 315
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
Compliance
- Time to disclose
- 17 weeks(118 days from discovery to filing)
- Compliance flags
- ME AG >90d · 118dME resident >60d · 123d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 12, 2022→ Filed with AG: Jul 8, 2022118d 90 days ME AG >90d Maine Discovered: Mar 12, 2022→ Notified: Jul 13, 2022123d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.