Social EngineeringPIIEmploymentLowContained

CNO Services, LLC

bd_8abf8d790dd33d19 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 15, 2026

Filed

Jun 12, 2026

To disclose

—

Affected

Not disclosed

Linked

8 filings

Confidence

67%

CNO Services LLC reports a supplemental vishing incident discovered on May 15, 2026, where a scammer impersonated IT support to gain limited unauthorized access to one associate's employment data. The company engaged forensic investigators and federal law enforcement, changed helpdesk procedures, and provided complimentary identity protection services via IDX to affected associates.

J jump to incidentP pin to compareR raw source

Incident timeline

May 15, 2026

Discovered

Jun 12, 2026

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Texas State AGbd_8ea207987f1521ac2026-06-09 · +3dVerified
Maine State AGbd_35331b950f52b3072026-06-08 · +4dVerified
Massachusetts State AGbd_a08bd193f520e4632026-06-08 · +4dCandidate
New Hampshire State AGbd_cf4aa13c35b5ab612026-06-08 · +4dVerified

Show 3 more filings ↓up to 31d gap

Illinois State AGbd_631d95d28788f5992026-06-01 · +11dVerified
Texas State AGbd_40c071a3ad0480052026-07-03 · +21dVerified
New Hampshire State AGbd_9057656d1d5448c22026-07-13 · +31dVerified

Name: CNO Services, LLC
norm: cno services
Domain: cnoinc.com

Name: CNO Services, LLC
norm: cno services
Domain: cnoinc.com

Discovered: May 15, 2026
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIEmployment
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to U.S. federal law enforcement
Initial access: phishing_link

During the incident: Engaged a leading security and forensics company to conduct an investigation
Reported this incident to U.S. federal law enforcement
Launched an investigation into the scope and nature of the event
Taking steps to further restrict access and enhance monitoring of internal systems
Changing helpdesk procedures
Investigating other protections to prevent further unauthorized activity
Raised awareness amongst associates regarding the risks of vishing and other social engineering attempts
Engaged IDX, a leading identity protection services provider, to provide you with identity protection services at no cost
Changes made: Enhanced monitoring of internal systems
Changed helpdesk procedures
Raised awareness amongst associates regarding the risks of vishing and other social engineering attempts
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 6 states

View merged incident ↗

Illinois State AGJun 1 · first

Maine State AG+7d

Massachusetts State AG+7d

New Hampshire State AG+7d

Texas State AG+8d

Nebraska State AG+11d · this page

Texas State AG+32d

New Hampshire State AG+42d

Pattern: first filing Jun 1 (IL), last Jul 13 (NH) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/0be1c2ca-8f9e-4e14-ac09-4a597d55dead.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 12, 2026
Raw hash: f9d98101ebeadc044c6f418aba3935207abb2f7e568078fc5f55b6a90f419b9c

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityCNO Services, LLC

Victim entityCNO Services, LLC

Incidentdiscovered May 15, 2026

Stated responseEngaged a leading security and forensics company to conduct an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov