Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsScattered SpiderSupply Chain (3P Vendor)TargetedEmployee Data InvolvedPIIIdentity (basic)LowContained

WASHINGTON NATIONAL INSURANCE COMPANY

bd_90bf9c26fb0cf0e4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 29, 2023

Filed

Jan 31, 2024

To disclose

9 weeks

Affected

4state residents only

Linked

7 filings

Confidence

67%

Full breach record for WASHINGTON NATIONAL INSURANCE COMPANY →5 incidents on file

Washington National Insurance Company disclosed a data breach affecting 4 New Hampshire residents. On November 29, 2023, the company discovered that a threat actor identified as 'Scattered Spider' conducted a SIM-swapping attack on a senior officer's Verizon cellular account. This allowed the actor to bypass multi-factor authentication and access certain company data, including personal information of residents. The company contained the incident, notified law enforcement (FBI), engaged forensic investigators, and offered identity theft protection services to affected individuals. The attack was targeted at the company itself, not specifically at individual residents' data.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 63 days

Nov 29, 2023

Discovered

Jan 31, 2024

Filed

vs. sector median

on median

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Montana State AGbd_1062194d9f8fbff42024-01-31Verified
Massachusetts State AGbd_b04b29fd09779ac52024-01-31Verified
Maine State AGbd_11120bc7f0efd63a2024-01-30 · +1dCandidate
California State AGbd_1088d79c4a9bd4e42024-01-29 · +2dVerified

Show 2 more filings ↓up to 30d gap

Indiana State AGbd_dd14b3bb28be9b922024-01-26 · +5dVerified
Illinois State AGbd_ff3d5fc8075681c22024-01-01 · +30dVerified

Name: WASHINGTON NATIONAL INSURANCE COMPANY
norm: washington national insurance

Name: WASHINGTON NATIONAL INSURANCE COMPANY
norm: washington national insurance
Industry: Financial Servicesllm

Discovered: Nov 29, 2023
Materiality determined: —
Notification sent: Jan 26, 2024
Affected individuals: 4state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unknown· Scattered Spider
MITRE ATT&CK: T1566 PhishingT1078 Valid AccountsT1114 Email Collection
Threat actor: Scattered SpiderExternal
Regulator citations: Notified the Office of the Attorney General of New HampshireNotified law enforcementWorking with the Federal Bureau of InvestigationWorking with the Offices of the United States Attorneys
Third party: via Verizon
Initial access: phishing_link

During the incident: Immediately took steps to contain any unauthorized access
Launched a full investigation
Notified law enforcement
Began working with the Federal Bureau of Investigation
Began working with the Offices of the United States Attorneys
Disabled the senior officer’s corporate access
Reset passwords for personnel
Blocked the threat actor’s potential access
Scanned its environment
Implemented additional security measures designed to prevent the reoccurrence of this type of an event
Hired an external forensics investigator to conduct an investigation
Took steps to further restrict and monitor access to our systems
Enhanced security procedures
Enhanced policyholder safeguards to provide added protection to your personal information
Offering identity theft protection services through IDX
Changes made: Implemented additional security measures designed to prevent the reoccurrence of this type of an event
Enhanced security procedures
Enhanced policyholder safeguards to provide added protection to your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(63 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+25d

California State AG+28d

Maine State AG+29d

Montana State AG+30d

Massachusetts State AG+30d

New Hampshire State AG+30d · this page

Pattern: first filing Jan 1 (IL), last Jan 31 (NH) — a 30-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/washington-national-insurance-company-20240131.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 31, 2024
Raw hash: 8d78919c451c251d7cfd0c7a0c7d1e7216a0bbb511e141cf4596881ec91dde53

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityWASHINGTON NATIONAL INSURANCE COMPANY

Victim entityWASHINGTON NATIONAL INSURANCE COMPANY

Incidentdiscovered Nov 29, 2023

Stated responseImmediately took steps to contain any unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov