HackingFinancial ServicesFinanceStolen CredentialsData MishandlingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowResolved
Empire Fidelity Investments Life Insurance Company
bd_829d7811a8917cba · schema v1 · pii pii-v1
Full breach record for Empire Fidelity Investments Life Insurance Company →Fidelity Investments Life Insurance Company and Empire Fidelity Investments Life Insurance Company notified 176 Maine residents of a cybersecurity event at third-party vendor Infosys McCamish Systems (IMS). Between October 29–November 2, 2023, an unauthorized third party accessed IMS systems and exfiltrated personal data. Discovered February 13, 2024; supplemental notification sent July 11, 2024. 24-month credit monitoring via TransUnion offered to affected individuals.
Maine clockDiscovered Feb 13, 2024 → Filed with AG Jul 19, 2024157d ✗ ME AG >90d22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed176 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f6405048-b0ef-4347-ba99-c6dd95fd37bb.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 19, 2024
- Raw hash
- d6b865a1d8d9286aba6f21287edac3c4fd426147177a55c2f68df61411e92eab
Reporting entity
- Name
- Empire Fidelity Investments Life Insurance Companynorm: empire fidelity investments life insurance
- Domain
- fidelity.com
- Industry
- Financial Services
Victim entity
- Name
- Empire Fidelity Investments Life Insurance Companynorm: empire fidelity investments life insurance
- Domain
- fidelity.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Feb 13, 2024
- Materiality determined
- —
- Notification sent
- Jul 11, 2024
- Affected individuals
- 176
- Data types
- PII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Maine Attorney General notification filed
- Third party
- via Infosys McCamish Systems (IMS)
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 22 weeks(157 days from discovery to filing)
- Compliance flags
- ME AG >90d · 157dME resident >60d · 149d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 13, 2024→ Filed with AG: Jul 19, 2024157d 90 days ME AG >90d Maine Discovered: Feb 13, 2024→ Notified: Jul 11, 2024149d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.