HackingFinancial ServicesFinanceCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumContained

Texas Medical Liability Trust on behalf of itself and its affiliates, Texas Medical Insurance Company, Physicians Insurance Company, and Lone Star Alliance, Inc., a Risk Retention Group (collectively “TMLT”).

bd_7f355f6d61995bd0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 12, 2022

Filed

Sep 11, 2023

To disclose

48 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Texas Medical Liability Trust on behalf of itself and its affiliates, Texas Medical Insurance Company, Physicians Insurance Company, and Lone Star Alliance, Inc., a Risk Retention Group (collectively “TMLT”). →

Texas Medical Liability Trust (TMLT) notified California residents of a security incident where an unauthorized actor may have accessed systems between October 2 and October 13, 2022. TMLT identified suspicious activity on October 12, 2022. Affected data includes names, SSNs, driver's license numbers, financial account info, and medical treatment/diagnosis information. TMLT engaged forensic specialists, notified law enforcement, and is offering 12 months of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 10 days

discovery → filing · 48 weeks / 334 days

Oct 2, 2022

Begins

Oct 12, 2022

Discovered

Sep 11, 2023

Filed

vs. sector median

+40 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Maine State AGbd_c69ab2ff7009f1152023-09-11Candidate

Name: Texas Medical Liability Trust on behalf of itself and its affiliates, Texas Medical Insurance Company, Physicians Insurance Company, and Lone Star Alliance, Inc., a Risk Retention Group (collectively “TMLT”).
norm: texas medical liability trust on behalf of itself and its affiliates texas medical insurance company physicians insurance company and lone star alliance inc a risk retention group collectively tmlt

Name: Texas Medical Liability Trust on behalf of itself and its affiliates, Texas Medical Insurance Company, Physicians Insurance Company, and Lone Star Alliance, Inc., a Risk Retention Group (collectively “TMLT”).
norm: texas medical liability trust on behalf of itself and its affiliates texas medical insurance company physicians insurance company and lone star alliance inc a risk retention group collectively tmlt
Industry: Financial Servicesllm

Discovered: Oct 12, 2022
Breach occurred: Oct 2, 2022 – Oct 13, 2022
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Data elements: Social Security numberMedical information
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified federal law enforcementNotifying applicable regulatory authorities

During the incident: Took steps to secure our network
Launched an investigation with the assistance of third-party forensic specialists
Notified federal law enforcement about this incident and are cooperating with their investigation
Reviewing our policies, procedures, and processes related to the storage and access of sensitive information
Notifying applicable regulatory authorities, as required by law
Offering 12-months of complimentary access to credit monitoring services through Kroll
Changes made: Reviewing our policies, procedures, and processes related to the storage and access of sensitive information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 48 weeks(334 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Maine State AGSep 11 · first

California State AGSep 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-573094
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 11, 2023
Raw hash: e4b3e824fcad1a483872d0714a0c1fe7df3f2f534efdd6e9c48ed15f6d87ec93

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityTexas Medical Liability Trust on behalf of itself and its affiliates, Texas Medical Insurance Company, Physicians Insurance Company, and Lone Star Alliance, Inc., a Risk Retention Group (collectively “TMLT”).

Victim entityTexas Medical Liability Trust on behalf of itself and its affiliates, Texas Medical Insurance Company, Physicians Insurance Company, and Lone Star Alliance, Inc., a Risk Retention Group (collectively “TMLT”).

Incidentdiscovered Oct 12, 2022

Stated responseTook steps to secure our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov